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RESPONSES  TO: 

The  Unspoken  Truth 
About  Why 
Your  IT  Sucks 

Dec.  1,2009 

One  reason  IT  sucks  is  it  has  no 
heart.  What  could  be  IT’s  heart  (or 
passion)  is  replaced  with  a  methodi¬ 
cal  machine  driven  by  cost  and  a 
rigid  technological  structure  which 
is  usually  based  upon  and  limited  to 
Microsoft  technology. 

The  most  successful  solutions 
are  ones  that,  first,  put  the  user  at 
the  forefront  and,  second,  are  devel¬ 
oped  by  passionate  people  —  people 
who  want  to  make  the  best  solution, 
make  the  most  people  happy,  write 
efficient  code,  and  save  the  com¬ 
pany  money  to  boot.  Management, 
however,  needs  to  give  these  people 
as  much  freedom  and  as  little  rigid¬ 
ness  as  possible. 

I  see  nothing  but  stressful  and 
typically  unhappy  employees  in 
IT.  And  then,  as  the  author  states, 
people  with  passion  —  who  produce 
excellent  solutions  that  save  the 
company  money  and  make  users 
happy  —  are  let  go  or  are  not  rec¬ 
ognized.  Sometimes  this  is  due  to 


unconventional  methods  of  attain¬ 
ing  the  solution  (not  fitting  the  Mi¬ 
crosoft  mold)  or  just  a  simple  lack  of 
appreciation  from  management. 

■  Submitted  by:  Smiroldo 

■ 

The  deadliest  words  I  know  of  in  IT 
are  “All  you  have  to  do  is _ ” 

Let’s  face  it:  IT  is  a  pretty  spine¬ 
less  group.  They  generally  know 
you  can’t  reinvent  Amazon  over  a 
holiday  weekend  for  under  $50.  But 
when  users  come  and  say  “All  you 
have  to  do  is . . .”  and  refuse  to  ac¬ 
cept  a  more  realistic  estimate,  IT 
almost  invariably  caves,  promises 
the  impossible,  fails,  and  thereby 
demonstrates  —  yet  again  —  that 
they’re  an  overpaid  bunch  of  hope¬ 
less  incompetents. 

Professions  like  management  and 
marketing  don’t  have  major  issues 
like  this.  To  survive  in  people¬ 
facing  occupations,  you  have  to  have 
a  basic  minimum  of  pushy  and  ob¬ 
noxious  qualities.  IT  would  gener¬ 
ally  rather  be  technology-facing,  and 
have  to  settle  for  just  obnoxious. 

■  Submitted  by:  timh 
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The  No.  t  Cause  of  IT  Failure:  Complexity 


Is  THE  problem  a  bad  set  of  user  re¬ 
quirements?  Poor  business  alignment? 
No.  According  to  software  architect 
Roger  Sessions,  the  primary  cause  of 
software  project  failures  is  complexity. 

Complexity  can  create  delays,  cost 
overruns  and  systems  that  don’t  meet 
business  needs,  according  to  Sessions, 
who  is  chief  technology  officer  at  Object- 
Watch  Inc.  and  author  of  Simple  Architec¬ 
tures  for  Complex  Enterprises  (Microsoft 
Press,  2008).  “Our  goal  should  be  to 
design  the  least  complex  architecture  pos¬ 
sible  that  solves  the  business  problem,”  he 
said  in  a  report  he  released  last  month. 

In  the  report,  Sessions  estimated  that 
worldwide,  the  annual  cost  of  IT  failure 
is  about  $6  trillion  —  that’s  $500  billion 
per  month.  For  the  U.S.,  the  annual  cost  is 
about  $1  trillion.  In  an  interview  with  Com- 


puterworld  New  Zealand,  Sessions  said  his 
estimates  may  be  30%  too  high  or  30%  too 
low,  but  he  maintained  that  it’s  the  magni¬ 
tude  of  the  numbers  that’s  important. 

According  to  the  report,  “The  IT  Com¬ 
plexity  Crisis:  Danger  and  Opportunity,” 
preventing  so  much  costly  IT  failure  would 
painlessly  add  $500  billion  per  month  to 
the  world  economy,  and  it  could  make  com¬ 
panies  more  profitable  and  enable  govern¬ 
ments  to  provide  more  ser-  _ 

vices  without  raising  taxes. 

Sessions’  remedy  is  a  soft¬ 
ware  design  process  called 
Simple  Iterative  Partitions, 
which  “partitions  business  functions  into 
subsystems”  in  a  way  that  makes  the  over¬ 
all  system  as  simple  and  reliable  as  pos¬ 
sible  to  achieve  the  business  goal. 

-  Mitch  Betts 
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Helsinki  public  utility  Helsingin 
Energia  next  month  will  open  a 
new  data  center  that  will  recycle 
heat  from  the  servers  to  help  gen¬ 
erate  energy  and  deliver  hot  water 
for  the  Finnish  capital  city. 

The  recycled  heat  from  the  data 
center,  built  by  Helsinki  IT  servic¬ 
es  company  Academica  Oy,  could 
add  about  1%  to  the  total  amount 
of  energy  generated  by  Helsingin 
Energia,  according  to  Juha  Sipila, 
the  utility's  project  manager. 

The  data  center  is  connected 
to  Helsingin  Energia’s  district 
heating  system,  which  pumps  hot 
water  through  a  network  of  pipes 
to  commercial  buildings  and  resi¬ 
dences  in  Helsinki,  as  well  as  to 
the  utility’s  district  cooling  system, 
which  brings  in  cold  seawater. 

In  the  innovative  system,  cold 
water  is  pumped  through  pipes 
in  the  data  center  to  cool  off  the 
computer  equipment.  The  water, 
now  warmer,  flows  to  a  pump  that 
further  heats  the  liquid  and  sends 
it  into  the  district  heating  system. 

The  system  will  generate  enough 
energy  to  heat  the  equivalent  of 
500  large  houses,  while  the  data 
center  will  benefit  from 
much  lower  cooling 
costs,  officials  said. 

The  data  center  is 
located  in  a  former 
World  War  II  bomb  shelter  carved 
into  the  bedrock  under  Helsinki’s 
Uspenski  Cathedral. 

-  MIKAEL  RICKNAS, 
IDG  NEWS  SERVICE 
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BETWEEN  THE  LINES 

By  John  Klossner 


FUTURE  WATCH 

Nanotech  Creates  Batteries  Out  of  Paper 


Researchers  at  Stanford  Uni¬ 
versity  have  used  nanotechnol¬ 
ogy  to  create  lightweight,  bend¬ 
able  batteries  out  of  paper. 

The  paper  batteries  are  designed  to 
be  folded,  crumpled  or  even  soaked  in 
an  acidic  solution  and  still  work,  ac¬ 
cording  to  Yi  Cui,  assistant  professor 
of  materials  science  and  engineering  at 
Stanford.  The  team  created  the  batter¬ 
ies  by  coating  a  sheet  of  paper  with  ink 
made  of  carbon  nanotubes  and  silver 
nanowires. 

Stanford  offered  no  indication  of 
when  the  batteries  might  be  ready  for 
commercial  use. 

The  striking  aspect  of  the  develop¬ 
ment  is  “how  a  simple  thing  in  daily  life 
—  paper  —  can  be  used  as  a  substrate  to 
make  functional  conductive  electrodes 
by  a  simple  process,”  said  Peidong  Yang, 
professor  of  chemistry  at  the  University 
of  California,  Berkeley,  in  a  statement. 

The  nanotubes  used  in  the  paper  bat¬ 
teries  and  supercapacitors  have  a  very 
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small  diameter,  which  enables  the  ink 
made  from  them  to  stick  tightly  to  the 
paper.  The  university  noted  that  the 
paper  supercapacitors  may  be  able  to 
handle  40,000  charge-discharge  cycles, 
which  is  an  order  of  magnitude  more 
than  lithium  batteries  can  withstand. 

Cui  pointed  out  that  the  nanomateri¬ 
als  make  better  conductors  than  tradi¬ 
tional  materials  because  they  can  move 
electricity  more  efficiently. 

This  is  just  the  latest  report  of  scien¬ 
tists  using  nanotechnology  to  further 
battery  research. 

In  April,  MIT  researchers  reported 
that  they  are  combining  nanotechnology 
with  genetically  engineered  viruses  to 
build  batteries  that  could  power  hybrid 
cars  and  cell  phones. 

And  before  that,  another  Stanford 
research  team  used  silicon  nanowires 
to  enable  lithium-ion  batteries  to  hold  10 
times  the  charge  they  could  before,  ac¬ 
cording  to  Cui. 

-  Sharon  Gaudin 


Despite  forecasts  of  an 
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RESEARCH  RECAP 

Personal  PCs 
Find  a  Home 
In  the  Office 

Companies  are  starting  to  let 
employees  use  privately  owned 
notebook  computers  for  work 
purposes,  according  to  a  Gartner 
Inc.  survey  of  500  IT  managers  in 
the  U.S.,  U.K.  and  Germany. 

On  average,  10%  of  the  note¬ 
books  at  the  respondents’  orga¬ 
nizations  were  employee-owned, 
the  Gartner  report  said,  and  the  IT 
managers  said  they  expect  that  per¬ 
centage  to  creep  higher  next  year. 

Some  employees  like  the  trend 
because  it  means  they  can  have 
more-powerful  notebooks  and 
newer  designs  than  their  com¬ 
panies’  IT  departments  provide, 
Gartner  said.  For  employers,  it  can 
mean  lower  costs. 

The  survey  found  that  47% 
of  workplaces  have  banned 
employee-owned  PCs,  43% 
have  policies  that  allow  the  use  of 
employee-owned  PCs  for  work- 
related  purposes,  and  10%  have 
no  policy  on  the  matter. 

Gartner  noted  some  variations 
from  country  to  country:  More 
than  60%  of  German  companies 
allow  the  use  of  employee-owned 
PCs,  compared  with  30%  of  com¬ 
panies  in  the  U.S.  and  the  U.K. 

-  MITCH  BETTS 
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The  ultra-modern  Curve  in  the  heart  of  the  UK,  has  a 
highly-innovative  communications  platform.  This 
software-based  IP  platform  supports  every  aspect  of 
the  Curve's  operations,  integrating  fixed  and  wireless 
systems  with  ticketing  and  other  business  applications. 
Unified  communications  has  enabled  the  theatre  to 
achieve  operational  efficiency  and  deliver  a  more  satisfying  . 
customer  experience.  Ruth  Eastwood  says,  "Being  first  is  ^ 

one  of  the  theatre's  drivers.  NEC  technologies  offer  the  | 

1  Iff  SI : 

theatre  both  flexibility  and  value  for  the  money"  Bravo.  , 
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STEAL  THIS  IDEA 

Big  Budget  Cuts 
Don’t  Mean  the 
End  of  Staff  Training 

At  THE  height  of  the  recession,  Provi¬ 
dence  Health  &  Services  in  Seattle 
whacked  its  IT  training  budget  by  a 
hefty  65%.  That  meant  conferences 
and  most  tuition-based  classroom  training 
were  out  of  the  question.  So  Eric  Cowper- 
thwaite,  the  health  service  provider’s  chief 
information  security  officer,  started  looking 
for  alternate  ways  to  provide  his  staff  with 
ongoing  education. 

He  approached  officials  at  a  local  security 
company  and  offered  to  pay  them  a  small 
amount  to  jointly  develop  training  modules 
he  could  then  deliver  to  his  staff  himself. 
What  he  got  was  a  customized  course  on  risk 
management  methodologies  and  risk  analy¬ 
sis  skills. 

The  payback:  “I  was  able  to  demonstrate  to 
employees  that  I  was  still  committed  to  their 
growth  and  development,”  Cowperthwaite 
said.  “While  I  may  not  be  able  to  let  them  go 
to  a  conference  in  Orlando,  I’m  still  able  to 
invest  in  my  people.  That  was  what  was  most 
critical:  to  show  people  that  we  were  still 
willing  to  invest  in  them.” 

Cowperthwaite  said  he  also  visits  with 
local  FBI  and  Secret  Service  agents  working 
in  Seattle,  Los  Angeles,  Portland  and  San 
Francisco  —  cities  where  Providence  Health 
has  offices. 

“Someday,  something  bad  is  going  to  hap¬ 
pen  to  your  company.  A  laptop  may  get  sto¬ 
len  or  data  gets  stolen  or  a  virus  gets  inserted 
into  your  network.  Before  you  ever  get  to 
that  point,  go  find  the  local  FBI  or  Secret  Ser¬ 
vice  office,  or  even  your  local  chief  of  police, 
and  invite  them  to  lunch  and  get  to  know 
them,”  Cowperthwaite  advised. 

The  payoff  is  that  if  and  when  you’re  faced 
with  a  security  crisis,  you’ll  have  allies  you 
can  turn  to.  You’ll  also  get  tips  on  how  to 
help  law  enforcement  authorities  solve  your 
case,  Cowperthwaite  said. 

He  cited  a  time  when  he  worked  with  the 
Secret  Service  on  some  problems  with  mali¬ 
cious  software.  “What  they  wanted  from 
us  were  forensically  clean  versions  of  the 
computers  involved,”  Cowperthwaite  said, 
and  knowing  that  upfront  meant  the  incident 
could  be  resolved  quickly. 

-  Julia  King 


INNOVATION 

The  3-D,  squeezable  mouse:  Researchers  have  developed  a 
squeezable  input  device,  called  Suma,  that  gives 
users  a  new  way  of  interacting  with  computers, 
according  to  Duncan  Smith,  head  of  consumer 
product  development  at  Cambridge  Consultants  Ltd.  As  Suma’s 
pliant  foam  is  squeezed,  sensors  translate  the  3-D  indentations 
into  software-readable  instructions  to  help  control  objects  on 
the  screen.  Suma  can  not  only  move  objects  but  also  manipulate 
their  shape,  Smith  said,  adding  that  Suma  could  be  used  for  gam¬ 
ing,  3-D  graphics  and  medical  applications. 

SOURCES:  IDG  NEWS  SERVICE:  CAMBRIDGE  CONSULTANTS  LTD..  CAMBRIDGE.  ENGLAND 


BOOK  REVIEW 

IT  Leadership 
Boiled  Down 
To  5  Elements 

There  isn’t  any  flashy  writing  or  trendy 
technology  here.  No  mention  of  clouds, 
Facebook  or  Twitter.  But  the  new  book 
World  Class  IT  (Jossey-Bass,  2009),  by 
consultant  Peter  A.  High,  provides  solid 
-  dare  I  say  timeless  -  advice  for  CIOs  try¬ 
ing  to  manage  IT  for  business  success. 

The  book  takes  the  CIO’s  complex 
world  and  boils  it  down  to  the  following 
core  principles  (stated  here  verbatim): 

1.  Recruit,  train  and  retain  world- 
class  IT  people. 

2.  Build  and  maintain  a  robust  IT 
infrastructure. 

3.  Manage  projects  and  portfo¬ 
lios  effectively. 

4.  Ensure  partnerships  within 
the  IT  department  and  with  the 
business. 

5.  Develop  a  collaborative  rela¬ 
tionship  with  external  partners. 

Each  principle  gets  its  own  chapter, 
and  each  one  includes  subprinciples, 
such  as  “maximize  systems’  uptime” 
and  "align  IT  with  the  business’s  strat¬ 
egy.”  But  what’s  interesting  is  that  High 
says  new  CIOs  should  tackle  those 
issues  in  the  order  presented  above, 
starting  with  people  and  then  moving  on 
to  developing  a  reliable  IT  infrastructure. 

While  these  days  it  would  be  tempt¬ 
ing  to  start  with  No.  4,  the  IT-business 
alignment  principle,  High  says  you  need 


World  Class 

IT 


to  get  your  IT  house  in  order  if  you  want 
to  gain  the  credibility  you'll  need  to  work 
with  other  C-level  execs.  Besides,  it’s 
possible  to  have  great  business  align¬ 
ment  but  faulty  IT  plumbing. 

That’s  what  happened  to  Harrah’s 
Entertainment  Inc.,  which  got  glowing 
press  for  its  IT-business  alignment  but 
hadn’t  paid  enough  attention  to  disaster 
recovery  issues,  according  to  the  book’s 
forward  by  former  Harrah’s  CIO  John 
Boushy.  High’s  methodology  pointed 
out  the  deficiency,  Boushy  says. 

Along  the  way,  High  provides  an 
amazing  number  of  metrics  that  CIOs 
can  use  to  measure  their  progress  along 
the  five  frontiers  he  outlines.  The  met¬ 
rics  might  be  the  most  valuable  part  of 
the  book,  especially  for  IT  departments 
struggling  to  figure  out  how  to  measure 
their  performance. 

Be  forewarned:  High  says  the  journey 
from  ordinary  to  world-class  IT  can  take 
several  years,  and  even  then  you  can’t 
rest  on  your  laurels. 

r  MITCH  BETTS 
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THE  SYMBOL  OF  A 
REVOLUTION. 

Junos®:  A  platform  for  change.  The  network  as  we  know  it  desperately  needs  an 
overhaul,  but  it  won’t  happen  with  the  same  proprietary  thinking  of  the  last  ten  years. 
The  next  decade  demands  a  revolution  of  partnership  and  development  that  will 
only  come  from  a  common  platform,  and  that  platform  is  Junos.  Now,  developers 
everywhere  can  create  a  wave  of  network  applications  and  services  that  will  improve 
the  experience,  cost  and  use  of  the  network,  now  and  in  the  future.  Let  the  collaboration 
begin.  The  new  network  is  here  and  it  runs  on  Junos.  TheNewNetworklsHere.com 


jumper 


NETWORKS 
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U.S.  Moves  to 
Strengthen  H-1B 
Enforcement 

Immigration  officials  plan 
to  conduct  25,000  on-site 
inspections  in  fiscal  2010. 

By  Patrick  Thibodeau 


U.S.  IMMIGRATION 
officials  are  taking 
H-1B  enforcement 
from  the  desk  to  the 
field  with  a  plan  to  conduct 
25,000  on-site  inspections 
of  companies  hiring  foreign 
workers  during  the  govern¬ 
ment’s  current  fiscal  year. 

That  would  mark  a  nearly 
fivefold  increase  in  inspec¬ 
tions  over  the  previous  year, 
when  U.S.  Citizenship  and 
Immigration  Services  of¬ 
ficials  conducted  5,191  site 


visits.  The  federal  fiscal  year 
begins  Oct.  1. 

USCIS  Director  Alejandro 
Mayorkas  disclosed  the  up¬ 
graded  enforcement  plan  in  a 
letter  to  Sen.  Charles  Grass- 
ley  (R-Iowa),  a  co-sponsor 
with  Sen.  Dick  Durbin  (D- 
111.)  of  federal  legislation 
aimed  at  increasing  H-1B 
program  enforcement. 

In  the  letter,  released  by 
Grassley  last  month,  Mayor¬ 
kas  said  the  agency  began  a 
site  visit  and  verification  pro¬ 


gram  in  July  to  check  on  the 
validity  of  H-1B  applications. 

Mayorkas,  a  former  federal 
prosecutor  who  was  recently 
appointed  to  the  immigra¬ 
tion  post  by  President  Barack 
Obama,  told  Grassley  that  the 
inspections  aim  to  determine 
“whether  the  location  of  em¬ 
ployment  actually  exists  and 
if  a  beneficiary  is  employed 
at  the  location  specified, 
performing  the  duties  as  de¬ 
scribed,  and  paid  the  salary 
as  identified  in  the  petition.” 

The  immigration  agency 
moved  to  boost  enforcement 
of  H-1B  laws  after  an  internal 
study  released  about  a  year 
ago  disclosed  widespread 
violations  of  H-1B  rules  by 
employers.  The  study  found 
that  one  in  five  visas  in¬ 
volved  either  fraud  or  “tech¬ 
nical  violations.” 

The  increased  enforce¬ 
ment  comes  after  filings  for 
H-1B  visas  started  to  grow 
in  October,  following  a  lull 
of  several  months. 

Immigration  attorneys 
said  the  renewed  H-1B  de¬ 
mand  may  be  a  sign  that  the 


economy  is  improving  as 
companies  seek  to  hire  for¬ 
eign  IT  professionals,  includ¬ 
ing  developers  of  electronic 
games  and  other  products. 

From  last  summer  into 
September,  applications  for 
H-1B  visas  had  flatlined  at 
about  45,000  petitions.  But 
demand  rebounded  in  Octo¬ 
ber,  and  the  USCIS  reported 
that  fiscal  2010  visa  petitions 
had  reached  61,100  by  Dec.  4. 

The  annual  cap  for  H-1B 
visas  is  65,000. 

Immigration  attorneys 
project  that  the  H-1B  cap  for 
the  current  fiscal  year  should 
be  reached  by  early  2010,  far 
later  than  in  recent  years, 
when  the  pool  of  available  vi¬ 
sas  was  consistently  exhaust¬ 
ed  within  days  of  the  April  1 
start  of  the  filing  period. 

Randall  Sidlosca,  an  im¬ 
migration  attorney  in  the  Mi¬ 
ami  office  of  law  firm  Fowler 
White  Burnett  PA,  noted  that 
some  of  his  clients  plan  to 
ramp  up  operations  in  2010, 
and  he  believes  an  improving 
economy  is  behind  the  in¬ 
crease  in  H-1B  petitions. 

However,  data  released 
last  week  by  the  USCIS 
showed  that  during  fiscal 
2009,  some  U.S.  companies, 
including  Microsoft  Corp., 
Intel  Corp.  and  IBM,  con¬ 
tinued  to  hire  people  under 
H-1B  visas  despite  cutbacks 
in  their  own  staffs  and  an 
overall  decline  in  IT  em¬ 
ployment. 

The  year-end  USCIS  data 
also  showed  that  some  ma¬ 
jor  Indian  IT  services  firms 
cut  back  on  their  H-1B  use  as 
the  economy  softened. 

For  instance,  Infosys 
Technologies  Ltd.  received 
only  440  visas  —  less  than 
10%  of  the  4,559  it  received 
in  fiscal  2008.  Meanwhile, 
Wipro  Ltd.  topped  the  fiscal 
2009  list  with  1,964  visas; 
that’s  about  three-fourths 
the  number  it  got  the  year 
before.  ■ 
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‘War  of  Innovation’  Will 
Change  Face  of  Search 

Analysts  say  the  Google- 
Microsofit  war  has  already 
yielded  a  slew  of  search 
upgrades.  By  Sharon  Gaudin 


This  month’s  flurry  of 
upgrades  to  Google 
Inc.’s  eponymous 
search  engine, 
coupled  with  Microsoft 
Corp.’s  renewed  charge  into 
the  search  business,  could 
soon  lead  to  radical  changes 
in  one  of  the  Internet’s  most 
popular  applications. 

Analysts  say  the  increas¬ 
ingly  heated  battle  between 
Microsoft’s  new  Bing  search 
tool  and  Google  is  already 
bringing  users  an  avalanche 
of  innovations  that  should 
continue  for  a  year  or  two. 

“Google  and  Microsoft 
sparring  is  fueling  this,”  said 
Hadley  Reynolds,  an  analyst 


at  IDC.  “Microsoft’s  will¬ 
ingness  to  invest  in  search 
and  not  just  let  Google  walk 
away  with  it  is  driving  a 
new  level  of  competition.” 

Rob  Enderle,  principal 
analyst  at  Enderle  Group,  said 
Google  is  moving  quickly  to 
defend  its  turf.  “We’ve  got 
a  major  battle  going  on  for 
search  right  now,”  he  said. 
“Google  has  the  keys  to  the 
castle,  and  everyone  else  is 
storming  the  gates.  Whenever 
you  have  heavy  competition, 
you’ll  see  rapid  changes.” 

Early  this  month,  Google 
released  several  new  search 
tools,  including  a  much  an¬ 
ticipated  real-time  feature 


that  offers  users  the  option 
of  seeing  relevant  links  that 
have  just  been  added  to  the 
search  engine’s  index.  The 
company  had  promised  the 
feature  in  October,  after 
Twitter  Inc.  agreed  to  let 
Google  pull  posts  on  the 
social  networking  site  into 
search  results  in  real  time. 

Microsoft  signed  a  similar 
agreement  with  Twitter,  and 
another  with  Facebook  Inc., 
to  add  a  real-time  feature 
to  Bing.  The  Bing  update 
hasn’t  yet  launched. 

Google  also  unveiled 
three  other  offerings  this 
month:  Google  Goggles, 
a  photo-based  search  tool 
that’s  designed  to  let  users 
send  photos  of,  for  example, 
a  business  card,  book  cover 
or  bar  code  from  an  An- 
droid-based  smartphone  to 
Google  for  quick  identifica¬ 
tion  and  data  manipulation; 
a  feature-rich  dictionary  that 


defines  words  using  a  vari¬ 
ety  of  sources;  and  a  transla¬ 
tor  designed  to  help  users 
find  Web  pages  written  in 
more  than  40  languages. 

Not  to  be  outdone,  Micro¬ 
soft  this  month  released  the 
beta  version  of  its  updated 
Bing  Maps  tool  set  that 
some  industry  watchers  said 
may  outshine  the  popular 
Google  Maps. 

“The  competition  be¬ 
tween  Microsoft  and  Google 
is  driving  a  war  of  innova¬ 
tion  and  a  constant  upping 
the  bar  in  terms  of  features 
and  function,”  said  Dan 
Olds,  an  analyst  at  Gabriel 
Consulting  Group  Inc.  “I 
don’t  expect  to  see  this 
change  anytime  soon.” 

The  rapidly  emerging 
new  tools  are  starting  to 
change  the  search  paradigm 
from  one  where  the  same  re¬ 
sults  are  served  to  all  users 
to  one  where  search  tools 
serve  up  more  personalized 
results  that  include  various 
types  of  content,  including 
images,  video,  tweets  and 
blog  posts,  said  Olds. 

Less  than  six  months  after 
the  launch  of  Bing,  Google 
continues  to  dominate  the 
search  business,  according 
to  Experian  Hitwise,  an 
online  market  tracker.  The 
company  said  that  71.57% 
of  all  searches  in  November 
were  conducted  on  Google, 
up  about  one  percentage 
point  from  October. 

Meanwhile,  No.  3  Bing’s 
market  share  slipped  from 
9.57%  in  October  to  9.34% 
last  month.  Yahoo  Inc.’s 
search  engine  maintained 
its  runner-up  position,  but 
its  share  slipped  almost  one 
percentage  point. 

Yahoo  and  Microsoft 
this  month  finalized  a  deal 
that  calls  for  Bing  to  be  the 
primary  search  engine  on 
Yahoo  sites,  but  that  agree¬ 
ment  still  requires  regula¬ 
tory  approval.  ■ 
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Dossier 

Name:  John  Golden 
Title:  Founder 


Organization:  LiveActive 
Foundation 

Location:  Chicago 


Most  interesting  thing  people 
don’t  know  about  you:  “I’m  a 
seven-time  cardboard  boat 
building  champion.  You  have  to 
build  it  completely  out  of  card¬ 
board,  put  eight  people  in  it, 
put  it  in  a  lake  and  race  it.” 


Favorite  place:  “Quite  honestly, 
my  home.  If  you  asked  me  my 
favorite  country  outside  the 
U.S.,  it’s  Australia.  It’s  a  beau¬ 
tiful  country,  with  extremely 
nice  people.” 


Biggest  fear:  “My  biggest  fear 
is  heights.  That’s  been  one 
of  the  biggest  challenges  in 
climbing  -  managing  my  fear.” 


John  Golden  has  climbed  some  of  the 
world’s  most  difficult  peaks,  including 
Mount  Everest.  Yet  this  IT  executive’s 
climbing  achievements  are  only  part  of  his 
story.  Until  just  a  few  years  ago,  Golden 
suffered  constant  pain  in  his  knees.  He  had 
undergone  23  operations  without  much 
relief,  and  he  had  trouble  climbing  stairs 
and  even  walking.  But  in  2005,  Golden  re¬ 
ceived  a  double  cartilage  transplant  on  his 
left  knee  that  gave  him  the  physical  ability 
to  literally  scale  new  heights. 

Golden,  43,  former  CIO  and  executive 
vice  president  at  insurance  giant  CNA 
Financial  Corp.,  says  his  experience 
taught  him  important  lessons  about  life, 
business  and  even  information  technolo¬ 
gy.  He’s  now  working  with  the  LiveActive 
Foundation,  a  nonprofit  he  created  in 
March  2008  to  raise  awareness  of  and 
money  for  orthopedic  research,  and  he’s 
helping  to  launch  a  commercial  venture 
associated  with  the  foundation. 
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Your  fund’s  Web  site  listed  its  first  fund¬ 
raiser  as  the  “Golden  Everest  Expedition.” 
What  was  it  like  climbing  Mount  Everest? 

It  was  a  pretty  epic  experience.  The 
journey  is  more  than  you  can  imagine, 
although  we  didn’t  make  the  summit. 
We  got  up  to  Camp  4,  which  is  just 
over  26,000  feet  up.  But  weather  forced 
us  down.  Coming  down  we  got  hit  by  a 


■  THE  GRILL 

John  Golden 

An  IT  executive  learns  life  lessons 
of  perseverance  and  strength  as  he 

overcomes  injury  to  scale  some  of 
the  world’s  highest  mountains. 
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JOHN  GOLDEN  I  THE  GRILL  ■ 


blizzard  —  a  blizzard  like  you  wouldn’t 
believe,  with  extreme  temperatures, 

20, 30  below.  I  have  a  transplanted  left 
knee,  and  it  dislocated,  so  it  was  dif¬ 
ficult  to  walk  on.  We  did  a  transverse 
on  some  ice,  and  the  ice  broke  out  from 
under  my  feet,  and  I  fell.  I  was  roped  to 
the  mountain,  and  it  was  almost  verti¬ 
cal,  so  I  swung  into  the  mountain  with 
the  left  side  of  my  body.  I  cracked  three 
ribs  and  I  broke  my  hand.  My  whole 
climb  was  filmed  by  [Tigress  Produc¬ 
tions  for]  the  Discovery  Channel,  so 
there  will  be  a  show  on  me. 

Are  you  going  to  climb  Everest  again  to 
make  the  summit?  It’s  not  a  burning 
desire  in  me  to  do  it.  But  if  [my  life] 
allows  it,  I  might  try  it.  It’s  such  a  big 
sacrifice  for  my  family  —  you’re  gone 
70  days.  The  Discovery  Channel  keeps 
hoping  I’ll  come  back. 

Your  climbs  take  you  to  some  pretty 
remote  locales.  Do  you  take  along  a  Black- 
Berry  or  laptop?  The  No.  1  question  I  get 
asked  by  business  leaders,  IT  leaders,  is 
“How  do  you  get  all  that  time  off  from 
work?”  CNA  was  very  understanding. 
I’m  grateful  they  gave  me  that  time. 
With  that  said,  I  pretty  much  worked 
every  day  I  was  there.  Even  though  I 
was  in  some  of  the  most  remote  parts 
of  the  world,  I  was  connected. 

I  did  a  shorter  trip  to  Nepal  [before 
Everest],  and  one  of  the  things  I  learned 
was  cellular  technology  doesn’t  work  out 
there.  What  I  bring  is  satellite.  I  had  both 
a  PC  —  an  HP  Elite  book  —  and  I  had 
an  Apple  MacBook  Air.  I  had  a  portable 
satellite  dish;  it  weighs  just  a  pound  and 
a  half.  And  I  had  40  watts  of  solar  panels, 
because  you  have  no  electricity.  The 
hardest  thing  is  making  sure  you  keep 
everything  charged.  I  was  able  to  blog 
every  day.  We  sent  photos.  I  was  able  to 
do  conference  calls  at  work.  I  have  two 
young  kids  —  a  daughter  who  is  8,  and  a 
son  who  is  6  —  and  I  would  call  back  and 
Skype  with  them  twice  a  week. 

How  did  you  get  into  mountain  climbing? 

It  all  started  with  a  college  injury.  My 
legs  were  deteriorating  quickly  every 
day,  and  when  regular  medicine  ran 
out,  we  did  this  experimental  surgery 
in  2005.  It  was  almost  a  two-year  rehab 
process,  and  going  through  the  rehab, 

I  went  to  the  doctor  and  said  I  have 


to  have  a  goal  at  the  end  of  rehab.  My 
first  goal  was  being  able  to  play  with 
my  kids,  my  second  was  to  lose  weight 
—  I  went  from  250  to  180  pounds.  So 
then  I  needed  another  goal.  My  doctor 
said  no  running,  jumping  or  ballistic 
moves.  So  I  said,  “How  about  climb¬ 
ing  mountains?”  and  he  said,  “Yeah, 
sure.”  He  thought  I  meant  a  bluff  in 
Wisconsin.  This  would  have  been  June 
of  2007,  so  I  went  to  [premier  high- 
altitude  mountaineer]  Ed  Viesturs.  I 
had  him  come  speak  with  us  at  CNA, 
and  I  told  him  I  wanted  to  climb  moun¬ 
tains.  So  he  hooked  me  up  with  some 
guys  to  climb  Mount  Rainier,  which  I 
climbed  in  late  September  2007.  It  was 
just  an  unbelievable  experience.  I  was 
grateful  to  everyone  who  helped  me, 
so  I  wanted  to  find  a  way  to  give  back. 
That’s  when  I  created  the  LiveActive 
Foundation.  Then  I  came  up  with  my 
plan  for  climbing  Mount  Everest. 

What  did  this  teach  you  about  yourself, 
your  career  and  leading  IT  teams?  It 

reminded  me  to  be  vulnerable.  People 
don’t  like  to  be  vulnerable  because 
they  think  about  it  as  a  sign  of  weak¬ 
ness.  Many  times  as  executives  we’re 
afraid  to  say  we  don’t  know  or  under¬ 
stand,  and  we  don’t  open  up  ourselves 
to  as  many  ideas  as  we  should. 

And  the  other  thing  it  [taught  me  is] 


that  you  don’t  build  a  team  of  people 
who  are  like  you  —  you  build  a  team  of 
people  who  can  complement  you,  who 
fill  in  for  your  weaknesses.  And  one 
of  the  things  it  reinforced  was  to  keep 
going.  So  many  times  you  make  a  deci¬ 
sion,  you  run  with  it,  you  get  into  a  rut, 
and  then  you  wait,  wait,  wait,  and  then 
something  happens  and  you  go  again. 
But  it  reminded  me  that  I  have  to  take 
control,  that  I  have  to  keep  going. 

What  do  you  see  as  the  biggest  challenges 
facing  IT  right  now?  I  think  we’re  at  a 
point  of  inflection  for  IT  —  that  is, 
“How  do  we  become  the  business,  not 
[just]  be  welcomed  by  the  business?” 
Nothing  drives  me  more  crazy  than 
when  I  hear  IT  people  say,  “We  talk  to 
the  business.”  You  don’t  hear  market¬ 
ing  folks  or  accounting  say  that.  The 
inflection  point  is,  how  do  we  become 
the  business?  We  need  to  own  that  at¬ 
titude  as  IT  leaders. 

How  do  you  handle  setbacks?  I  have  had 
plenty  of  them.  I  don’t  judge  myself  as 
“Oh,  I  let  people  down.”  I  look  at  it  as 
a  bend  in  the  road,  not  the  end  of  the 
road.  I  think,  “OK,  I  went  down  this 
path,  I  didn’t  get  as  far  as  I  wanted,  but 
let’s  move  on,  let’s  learn  from  it.” 

—  Interview  by  Mary  K.  Pratt, 
a  Computerworld  contributing  writer 
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EARLY  ADOPTERS 
ARE  EMBRACING 
CLOUD  COMPUTING  - 

ON  THEIR 
HOME  TURF. 


STO 


RIVATE  CLOUDS 
—  where  compa¬ 
nies  use  their  own 
infrastructure  and  provi¬ 
sion  virtualized  services 
to  end  users  via  automated 
tools  —  are  gaining  ground 
among  IT  leaders  who  want  to  deliver 
advanced  services  at  lower  costs. 

However,  as  with  any  new  approach 
to  computing,  private  clouds  today 
fall  short  on  manageability,  and  some 
users  worry  about  the  risk  of  vendor 
lock-in,  particularly  with  virtualiza¬ 
tion  and  other  tools  that  make  cloud 
computing  possible.  Further,  the  fuzzy 
nature  of  just  what  private  cloud  com¬ 
puting  means  could  slow  the  adoption 
of  internal  cloud  setups. 

That  lack  of  definition  doesn’t  bother 
Geir  Ramleth,  CIO  at  San  Francisco- 


based  Bechtel  Corp.,  one  of  the 
world’s  largest  engineering  and 
construction  firms.  In  fact,  he 
says,  the  lack  of  a  precise  definition  is 
a  good  thing,  because  looking  at  the 
private  cloud  too  narrowly  would  “limit 
what  it  can  do  for  us.  You’re  talking  phi¬ 
losophy  here.” 

Alan  Boehme,  senior  vice  president 
and  head  of  IT  strategy  at  ING  Finan¬ 
cial  Services  in  San  Francisco,  adds  that 
a  private  cloud  requires  new  ways  of 
thinking  about  systems  architecture. 
“It’s  not  just  servers,  storage  or  net¬ 
works;  it’s  every  component,”  he  says. 

Meanwhile,  Bob  Zukis,  an  IT  strategy 
and  operations  consultant  at  Pricewa- 
terhouseCoopers  LLP  (PwC),  says,  “The 
private  cloud  is  less  about  technology 
than  it  is  a  rallying  cry  for  IT.” 

Continued  on  page  18 
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Join  us  in 
the  Inner  Circle. 

The  Computerworld  Inner  Circle  Research  Panel  was  established  as  a  way 
for  members  of  the  IT  community  to  share  information  and  gain  insight  into 
various  technology  topics,  including  new  initiatives  and  top  issues  faced  by 
IT  professionals  and  executives. 

Inner  Circle  panel  members  get  exclusive  access  to  results  of  the  surveys 
on  the  panel  site  at:  www.computerworldinnercircle.com,  and  are  eligible  for 
some  nice  cash  and  prize  giveaways  for  their  participation.  We  look  forward  to 
hearing  your  input! 

Join  for  Free! 

To  register  as  a  panel  member,  visit  www.computerworld.com/haic 
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■  COVER  STORY 


GLOSSARY 


3  TYPES 

OF  CLOUD 

SOME  DEFINITIONS  OF  COMMONLY 
USED  CLOUD  TERMS 

■  Public  cloud  computing:  Infra¬ 
structure  -  including  computers,  storage 
and  operating  systems  -  and  applications 
offered  as  services  on  a  subscription 
basis.  For  example,  Amazon.com’s  Elastic 
Compute  Cloud  service  offers  virtualized 
servers  that  users  rent  to  run  workloads 
over  the  Internet.  The  public  cloud  provider 
controls  where  the  workloads  execute. 

■  Private  cloud  computing:  Infra¬ 
structure  -  including  computers,  storage 
and  operating  systems  -  and  applications 
offered  as  virtualized  services  to  end  us¬ 
ers.  The  company  owns  and  controls  its 
infrastructure  and  applications,  which  run 
behind  a  corporate  firewall.  The  IT  orga¬ 
nization  manages  the  virtualization  tools, 
policies  and  workload  deployment. 

■  Hybrid  cloud  computing:  A  mix  of 

public  and  private  virtualized  infrastructure 
and  applications,  where  workloads  shift  in 
and  out  of  each  sphere,  in  an  automated 
way  or  not,  based  on  policies. 

-  MARK  EVERETT  HALL 


Continued  from  page  14 
That  rallying  cry  is  producing  a  real 
market.  According  to  Gartner  Inc., 
enterprise  spending  on  public  and 
private  cloud  infrastructure  services 
will  total  $3.2  billion  this  year,  up  28% 
from  $2.5  billion  in  2008.  Spending  in 
the  public  sphere  accounts  for  the  vast 
majority  of  those  dollars.  However,  the 
market  researcher  expects  that  by  2012, 
IT  shops  will  spend  more  than  half  of 
their  cloud  dollars  on  private  cloud  ser¬ 
vices  because  of  improvements  in  cost 
and  management  efficiency. 

GOING  PRIVATE 

Ramleth  has  heard  the  call  of  cloud 
computing,  and  he  has  seen  dramatic 
results  from  Bechtel’s  private  cloud 
platform,  a  standards-based  setup  that 
features  virtualization  technology  and 
automated  provisioning.  In  2005,  more 
than  2,000  IT  employees  staffed  approx¬ 


imately  20  data  centers,  where  server 
utilization  reached  2%  to  3%.  Today,  a 
much  leaner  Bechtel  IT  department, 
numbering  1,100  employees,  operates 
just  three  data  centers,  where  server 
utilization  averages  60%  to  70%. 

At  Bechtel,  44,000  employees  across 
the  globe  have  access  to  230  applica¬ 
tions.  The  IT  department  has  already 
shifted  about  60%  of  those  applications 
into  the  company’s  private  cloud.  The 
rest  will  be  moved  to  the  cloud  by  the 
beginning  of  2010,  says  Ramleth. 

Such  a  “transformation,”  as  Ramleth 
calls  it,  takes  years.  CIOs  need  to  move 
carefully,  he  says,  “because  you  don’t 
want  to  move  the  sins  of  the  past  into 
new  data  centers.” 

Before  2005,  Bechtel  had  an  IT-centric 
attitude  about  delivering  services  to 
users,  Ramleth  says.  It  had  no  set  stan¬ 
dards  and  provisioned  resources  man¬ 
ually.  Now  the  company 
embraces  a  collaborative 
model  of  computing,  one 
built  on  strict  standards 
and  guidelines  that  permit 
policy-driven  access  to 
provisioned  resources. 

For  example,  Bechtel 
standardized  on  Hewlett- 
Packard  dual-  and  quad- 
core  BladeSystem  servers. 

And  because  the  services 
are  separated  from  servers 
and  other  infrastructure 
elements  that  could  change  as  hard¬ 
ware  evolves,  existing  or  future  appli¬ 
cations  and  services  could  easily  run 
on  new  servers,  storage  systems  and 
networks. 

Ramleth  also  shifted  IT’s  security 
standards  from  topology-specific  to 
policy-oriented  ones.  And  he  has  stan¬ 
dardized  the  way  IT  prices  its  services 
to  users.  Where  pricing  used  to  vary 
based  on  application  and  user  loca¬ 
tion,  he  says,  it’s  now  a  flat  per-user  fee 
worldwide. 

Adopting  a  collaborative  model  is 
the  philosophical  shift  CIOs  need  to 
make  in  order  for  their  cloud  initia¬ 
tives  to  be  successful,  says  Ramleth. 

Ultimately,  evolving  to  a  hybrid 
public-private  cloud  scenario  will  even 
allow  him  to  eliminate  capacity  plan¬ 
ning  from  his  IT  responsibilities,  he 
says.  CIOs  should  build  private  clouds 
for  normal  workloads  and  then  buy  into 


the  public  cloud  for  peaks,  he  argues. 

ING’s  Boehme  agrees.  He  predicts 
that  a  policy-based,  hybrid  cloud  ap¬ 
proach  is  IT’s  future.  “It  doesn’t  matter 
where  the  assets  and  applications  are 
running,”  he  contends. 

On  the  face  of  it,  a  private  cloud  ap¬ 
pears  much  like  other  in-house  data 
centers,  where  applications  run  on 
machines  that  get  plugged  into  outlets. 
As  Cheryl  Doninger,  research  and  de¬ 
velopment  director  of  enterprise  com¬ 
puting  infrastructure  at  SAS  Institute 
Inc.  in  Cary,  N.C.,  says,  “We  license  the 
software,  and  we  own  the  hardware.” 

But  that’s  where  the  similarity  to 
old-line  computing  ends,  she  adds.  At 
SAS,  users  access  a  self-service  portal 
to  reserve  resources  on  the  company’s 
private  cloud,  much  like  customers  of 
Amazon.com’s  EC2  do  with  that  public 
cloud  service.  For  automatic  provision¬ 
ing,  SAS  uses  a  tool  called 
the  Infrastructure  Shar¬ 
ing  Facility  from  Platform 
Computing  Corp.  in 
Markham,  Ontario. 

With  Platform’s  ISF 
tool,  SAS  builds  policy- 
based  provisioning  tem¬ 
plates  that  help  prevent 
chaos  in  the  cloud,  Don¬ 
inger  says.  For  example, 
testers  in  SAS’s  quality 
assurance  department 
can  reserve  bare-metal 
machines  for  a  few  weeks,  or  engineers 
in  the  field  can  snag  predefined  serv¬ 
ers,  storage  and  software  for  a  couple 
of  days.  ISF  prevents  scheduling  con¬ 
flicts  and  releases  systems  back  to  the 
available  pool  after  they  are  no  longer 
in  use. 

While  some  IT  managers  are  comfort¬ 
able  with  automating  the  entire  resource 
reservation  and  provisioning  process, 
others  are  more  cautious.  Sinochem 
Group,  No.  170  on  Fortune’s  Global  500 
list,  is  one  example.  Through  a  transla¬ 
tor,  Jinsong  Peng,  IT  general  manager  at 
the  Beijing-based  industrial  conglomer¬ 
ate,  described  how  the  company  carried 
out  a  full  SAP  upgrade  for  its  200  sub¬ 
sidiaries  by  using  a  private  cloud  during 
the  testing  and  deployment  cycles. 

“In  the  traditional  model,  we  would 
have  needed  to  replicate  multiple  sys¬ 
tems  throughout  the  development  and 
testing  processes,”  Peng  says.  However, 


Mind  Share 

Which  cloud  technology 
providers  are  you  using 
or  considering? 


(private  cloud) 

2  Amazon.com 

(public  cloud) 

3  Microsoft 


SOURCE:  THEINFOPRO  INC. 
SURVEY  OF  50  IT  MANAGERS 
EVALUATING  OR  USING  CLOUD 
COMPUTING.  SEPTEMBER  2009 
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because  his  team  could  share  private 
cloud  resources,  Sinochem  needed 
to  add  only  10%  more  capacity  to  the 
company’s  IBM  AIX  server  infrastruc¬ 
ture.  As  is  the  case  at  SAS,  testers  at 
Sinochem  requested  systems  in  various 
configurations,  which  IBM’s  CloudBurst 
service  management  tools  dynamically 
allocated.  But  Sinochem  instituted  poli¬ 
cies  that  also  routed  each  resource  re¬ 
quest  through  a  systems  administrator 
for  approval,  Peng  says. 

Even  with  that  conservative,  human- 
in-the-middle  approach,  the  automated 
provisioning  process  helped  Sinochem 
complete  its  full  SAP  upgrade  in  seven 
months.  That’s  remarkable,  given 
that  such  projects  can  take  years  to 
complete.  For  example,  Shane  Co.,  a 
Colorado-based  retail  jewelry  chain, 
cited  in  bankruptcy  filings  that  its  SAP 
upgrade  took  two  and  a  half  years. 

As  a  result  of  the  success  of  the 
cloud-based  approach  at  Sinochem, 
Peng  says,  cloud  technology  will 
remain  a  permanent  part  of  the  com¬ 
pany’s  IT  testing  infrastructure. 

LIMITED  TOOLS 

At  ING,  which  has  a  few  private-cloud 
pilot  projects  in  the  works,  a  seamless 
hybrid  setup  is  years  away,  Boehme 
says.  In  part,  that’s  because  of  the  lim¬ 
its  of  today’s  management  tools. 

“You  want  a  single  pane  of  glass  for 
management,”  which  doesn’t  exist  today 
for  hybrid  platforms,  he  says.  For  exam¬ 
ple,  if  IT  pushed  workloads  into  public 
cloud  computing  services  today,  in- 
house  administrators  would  not  be  able 
to  manage  the  workloads  in  those  exter¬ 
nal  data  centers.  Those  workloads  would 
run  wherever  the  service  provider’s  poli¬ 
cies  deemed  it  appropriate.  Cross-cloud 
policy  management  doesn’t  exist. 

Paul  Burns,  an  analyst  at  Neovise 
LLC,  a  Fort  Collins,  Colo -based  research 
firm  specializing  in  cloud  computing, 


IT  Manas  in  Lean 
1  iward  Internal  Clouds 

Among  IT  managers  who  are  interested 

in  cloud  computing,  the  private  cloud  is 

' 

ARE  YOU  USING,  EVALUATING  OR  PLAN¬ 
NING  TO  USE  CLOUD  COMPUTING? 


Base:  122  IT  decision-makers 
in  charge  of  servers 


Base:  50  IT  decision-makers  in  charge 
of  servers  and  interested  in  cloud  computing 


WHICH  TYPE  OF  CLOUD 
COMPUTING  ARE  YOU  USING, 
EVALUATING  OR  PUNNING  TO  USE? 


Internal 

cloud: 


SOURCE;  ANDERS  LOf  GREN,  THEINFOPRO  INC.. 
NEW  VOR,K..  SEPTEMBER  2009 


echoes  Boehme’s  view.  Private  clouds 
will  dominate  inside  corporate  IT  for 
the  foreseeable  future  because  of  classic 
business  concerns  about  governance,  se¬ 
curity  and,  mostly,  control,  he  says. 

“Although  there  is  a  trend  toward  in¬ 
visible  infrastructure,  people  still  want 
to  touch  it  today,”  Burns  says. 

For  good  reason,  too,  Burns  adds.  He 
points  to  a  common  problem  in  most 
data  centers:  performance  degradation 
of  an  application.  Today’s  monitoring 
and  management  tools  would  not  be 
able  to  diagnose  a  problem’s  source  if 
the  application  were  running  in  a  hy¬ 


3  REASONS  TO  60  PRIVATE 


A  private  cloud  has  the  advantage  of  delivering 
some  of  the  benefits  of  the  public  cloud  without 
sacrificing  the  protections  provided  by  internal  IT 
processes  and  procedures.  In  a  recent  Forrester 
Research  report,  analyst  James  Staten  identified 


several  advantages  of  private  clouds: 

■  Improved  cost-effectiveness.  A  large  j 
telecommunications  company  has  an  internal 
cloud  with  about  25,000  virtual  servers.  Its  cloud  | 
is  30%  more  efficient  than  the  traditional  IT  infra-  \ 


brid  cloud  environment. 

Beyond  concerns  about  manageabili¬ 
ty,  Boehme  raises  the  specter  of  a  move 
to  cloud  computing  leading  to  vendor 
lock-in.  For  the  most  part,  CIOs  abhor 
vendor  lock-in.  Reliance  on  a  single 
vendor  can  be  costly  and  can  keep  a 
company  from  making  necessary  infra¬ 
structure  changes.  But  Boehme  worries 
that  IT  is  risking  “hypervisor  lock-in” 
because  of  the  lack  of  deep  interoper¬ 
ability  between  the  various  virtual  ma¬ 
chine  managers  on  the  market. 

For  example,  if  one  hypervisor  leap¬ 
frogged  others  in  terms  of  performance, 
security  or  features,  a  company  that 
used  a  different  hypervisor  might  not 
be  able  to  switch  and  take  advantage  of 
the  new  functionality  because  the  cost 
of  switching  might  prove  prohibitive. 
Also,  in  the  event  of  a  merger  or  acqui¬ 
sition,  integrating  the  two  companies’ 
operations  could  prove  difficult  if  each 
used  a  hypervisor  that  was  incompat¬ 
ible  with  the  other’s. 

But  many  enterprise  IT  managers 
are  finding  that  the  benefits  of  cloud 
computing  far  outweigh  the  limita¬ 
tions.  The  biggest  factor,  of  course,  is 
money,  at  a  time  when  the  recession 
has  halted  growth  in  IT  budgets. 

Still,  IT  has  to  continue  deliver¬ 
ing  services  to  the  business,  though 
it  has  to  do  so  while  spending  much 
less  money.  A  private  cloud  lets  IT  get 
immediate  dividends  through  self- 
service,  automated  provisioning  and 
improved  system  utilization  —  all  of 
which  can  lower  IT  operations  costs, 
which  chew  up  as  much  as  70%  of  a 
CIO’s  budget,  according  to  PwC. 

As  Vinod  Baya,  director  of  the  cen¬ 
ter  for  technology  and  innovation  at 
PwC,  observes,  “IT  has  done  great 
automating  everyone  but  itself.”  Now, 
he  says,  is  the  right  time  to  start.  ■ 

Hall  is  a  writer  living  in  Oregon.  He  can  be 
reached  at  mark.everett.hall@me.com. 


structure,  and  it  takes  fewer  people  to  manage  it. 

■  Faster  time-to-market  with  new 
applications.  With  an  internal  cloud,  a  new  IT 
infrastructure  can  be  deployed  within  24  hours. 

■  Better  protection  of  customer  infor¬ 
mation.  Few  public  cloud  providers  have  track 
records  that  would  satisfy  chief  security  officers 
or  regulatory  agencies. 

-  MITCH  BETTS 
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■  OPINION 

Preston  Gralla 


Has  Microsoft  Become 
Toothless  or  Friendlier? 


AT  ONE  TIME,  Microsoft  was  about  as  welcome  in 
Silicon  Valley  as  Darth  Vader  at  a  Jedi  knight  con¬ 
vention.  Commonly  referred  to  as  the  Evil  Empire, 
the  company  was  feared  and  hated  in  roughly 


equal  measure  when  it 
opened  its  first  Silicon  Val¬ 
ley  office  in  October  1999. 

In  that  same  year,  for 
example,  when  U.S.  District 
Judge  Thomas  Penfield 
Jackson  ruled  that  Micro¬ 
soft  had  used  its  monopoly 
power  to  the  detriment  of 
consumers  and  innovation 
in  general,  Gary  Rivlin, 
author  of  The  Plot  to  Get  Bill 
Gates,  told  the  San  Francis¬ 
co  Chronicle,  “I’m  sure  there 
are  champagne  corks  being 
popped  all  over  the  Valley.” 

He  was  no  doubt  right 
at  the  time.  But  recently, 
Sam  Altman,  co-founder 
of  Mountain  View-based 
Loopt,  which  makes  a  cell 
phone-based  GPS  sharing 
system,  told  the  Chronicle 
that  years  ago,  “I  would 
have  told  you,  ‘Microsoft  is 
really  evil.’  I  would  never 
work  with  them.”  Today, 
though,  “they’re  an  incred¬ 
ible  partner,”  he  says. 

Altman  isn’t  alone.  Ya¬ 
hoo  was  once  seen  as  the 
anti-Microsoft  —  a  laid- 
back,  innovative,  home¬ 
grown  Silicon  Valley  firm 
diametrically  opposed  to 


what  it  saw  as  the  shark¬ 
like  business  practices  and 
buttoned-down  culture  of 
Microsoft.  But  earlier  this 
month,  Yahoo  and  Micro¬ 
soft  finalized  a  search  and 
advertising  deal  that  calls 
for  Microsoft’s  Bing  to 
power  Yahoo  search  sites, 
and  for  Yahoo  to  handle 
premium  search  advertis¬ 
ing  services  for  Microsoft. 

And  how  about  open- 
source  technology?  There 
was  a  time  when  Micro¬ 
soft  used  all  of  its  con¬ 
siderable  might  to  try  to 
squash  open  source,  and 
open-source  proponents 
would  have  preferred  to  be 
stripped  naked,  covered 
with  honey  and  forced  to 
lie  on  top  of  a  colony  of  fire 
ants  than  deal  with  Micro¬ 
soft.  But  then,  several 
years  ago,  Microsoft  part¬ 
nered  with  Novell  to  work 
on  Linux  initiatives.  And 
recently,  Microsoft  even 

■  So,  what  hap¬ 
pened?  Why  are 
we  seeing  a  kinder, 
gentler  Microsoft? 


released  as  open  source  a 
download  tool  it  developed 
—  because  it  had  acciden¬ 
tally  used  an  open-source 
component  in  the  tool. 

So,  what  happened? 

Why  are  we  seeing  a 
kinder,  gentler  Microsoft 
that  many  Silicon  Valley 
companies  regard  as  a  po¬ 
tential  business  partner? 

Depending  on  your 
point  of  view,  it’s  either 
because  Microsoft  finally 
recognized  that  it’s  in 
its  best  interest  to  be  a 
cooperator  rather  than  a 
predator,  or  it’s  because 
Microsoft  is  on  a  long, 
slow  decline,  and  econom¬ 
ic  realities  are  forcing  it  to 
act  in  ways  contrary  to  its 
founders’  DNA. 

Those  who  adhere  to  the 
Microsoft-as-cooperator 
theory  trace  the  change  to 
the  antitrust  suit.  They  say 
that  losing  that  suit  led  to 
a  period  of  soul-searching, 
with  Microsoft  recogniz¬ 
ing  that  it  could  no  longer 
thrive  by  going  it  alone. 
That  ultimately  prompted 
it  to  sponsor  industry 
conferences,  look  for  busi- 


20  C0MPUTERW0RLD  DECEMBER  21,  2009 


ness  partners  rather  than 
companies  to  consume,  and 
expand  its  Silicon  Valley 


presence  to  1,300  workers, 
with  another  700  elsewhere 
in  the  Bay  Area. 

Others  say  that  Micro¬ 
soft’s  sea  change  had 
nothing  to  do  with  soul- 
searching  and  everything 
to  do  with  the  company’s 
growing  irrelevance.  The 
antitrust  ruling  took  away 
many  of  the  advantages  the 
company  had  against  its 
competitors,  and  so  Micro¬ 
soft  simply  could  no  longer 
use  its  monopoly  power  to 
crush  competitors.  In  addi¬ 
tion,  it  fell  behind  the  times 
and  allowed  Google  to  go 
from  start-up  to  monster  in 
record  time.  Finally,  oper¬ 
ating  systems  are  no  longer 
particularly  important,  and 
the  cloud  is  the  future  — 
and  that  means  Google. 

Which  story  tells  the 
truth?  Probably  both.  Any 
soul-searching  that  went 
on  at  Microsoft  was  likely 
caused  not  by  a  fit  of  con¬ 
science,  but  by  a  hard  dose 
of  economic  reality.  The 
truth  is,  Microsoft  simply 
can’t  go  it  alone  anymore, 
even  if  it  wants  to.  But 
even  though  change  may 
have  been  forced  on  it,  the 
company  truly  has  altered 
its  outlook  and  its  way 
of  doing  business.  It  has 
learned  that  in  today’s  tech 
world,  you’ve  got  to  go 
along  to  get  along.  ■ 

Preston  Gralla  is  a  contrib¬ 
uting  editor  for  Computer- 
world.com  and  the  author 
of  more  than  35  books, 
including  How  the  Internet 
Works  (Que,  2006). 
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i  k  T  THE  heart  of  Union 
Pacific  Corp.’s  railroad 
operations  is  an  IBM 
mainframe-based  trans¬ 
portation  control  system 
that’s  been  chugging  along  like  a 
hardworking  locomotive  for  nearly  40 
years.  According  to  industry  experts, 
it  was  a  pioneering  system  when  first 
introduced,  and  it  made  the  Omaha- 
based  transportation  giant  one  of  the 
first  companies  in  the  world  to  make 
extensive  use  of  online  transaction 
processing  technologies. 

But  while  Union  Pacific  has  been 
able  to  build  on  the  system’s  11  mil¬ 
lion  lines  of  macro  assembler  code 
and  make  functional  modifications  to 
it  over  the  years,  the  technology  has 
grown  obsolete,  according  to  company 
executives.  That  has  made  it  tougher 
for  developers  to  add  features  in  re¬ 
sponse  to  customers’  business  require¬ 
ments  in  what  has  become  an  increas¬ 
ingly  “alert-driven,  workflow-based 
world,”  says  Martin  Malley,  assistant 
vice  president  of  information  systems 
Continued  on  page  24 
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Union  Pacific  builds  a  more  nimble 
network  that  cuts  staff  training  time 
and  gives  customers  more  shipment 
visibility.  By  Thomas  Hoffman 
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Continued  from  page  22 
at  Union  Pacific  Railroad. 

For  example,  because  of  slowing 
sales  in  the  automotive  industry,  Union 
Pacific  executives  wanted  the  ability 
to  commingle  vehicles  from  different 
manufacturers  on  a  single  railcar,  says 
Malley.  The  old  system  wouldn’t  have 
been  able  to  handle  that  change,  he 
says.  But  thanks  to  a  new  distributed 
network  that  has  been  in  development 
since  2006,  the  company  has  been  able 
to  introduce  some  of  that  functionality 
and  much  more. 

The  emerging  network,  dubbed 
NetControl,  is  based  on  a  service- 
oriented  architecture  platform  that 
relies  heavily  on  open-source  tech¬ 
nologies  such  as  the  Apache  Web 
server,  Hibernate  query  software  and 
SpringSource’s  Java  application  man¬ 
agement  tools.  It  is  being  written  in 
J2EE  and  runs  on  Linux.  Components 
of  the  new  transportation  control  sys¬ 
tem  are  being  deployed  in  stages  to 
help  Union  Pacific  better  manage  more 
than  90,000  railcars  and  32,000  miles 
of  track.  The  SOA  project  will  cost 
$150  million  to  $200  million,  and  the 
system  is  expected  to  become  fully  op¬ 
erational  by  the  end  of  2013,  at  which 
time  the  company  plans  to  phase  out 
the  IBM  mainframe. 

A  SYSTEM  FOR  THE  FUTURE 

The  project  was  conceived  in  part 
because  Union  Pacific  was  having 
difficulty  recruiting  IT  workers  with 
macro  assembler  skills  to  maintain  and 
enhance  the  older  system,  says  Senior 
Vice  President  and  CIO  Lynden  Tenni- 
son.  Many  IT  workers  who  are  familiar 
with  the  mainframe-based  system  are 
nearing  retirement  age,  and  “most  col¬ 
leges  and  universities  don’t  even  teach 
assembler,”  he  says. 

Union  Pacific  also  wanted  to  develop 
a  system  that  would  improve  custom¬ 
ers’  interactions  with  the  company  and 
help  drive  internal  productivity  gains, 
says  Tennison. 

In  recent  years,  many  freight  cus¬ 
tomers  have  downsized  or  outsourced 
their  shipping  departments,  says  Chip 
Kraft,  director  of  operations  plan¬ 
ning  at  Transportation  Economics  & 
Management  Systems  Inc.,  a  Frederick, 
Md.-based  consulting  firm.  Those 
companies  are  now  counting  on  rail- 
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Company:  Union  Pacific  Corp. 

Headquarters:  Omaha 

Business:  Its  principal 
operating  company,  Union 
Pacific  Railroad,  provides 
freight  transportation  services 
to  23  states  in  the  western 
two-thirds  of  the  U.S. 

Company  stats:  Revenue  of 
$18  billion  in  2008;  net  income 
of  $2.3  billion  in  2008 

Project  champions:  Initially,  it 
was  Lynden  Tennison,  senior 
vice  president  and  CIO.  The 
current  project  leader  is  Martin 
Malley,  assistant  vice  presi¬ 
dent  of  information  systems  at 
Union  Pacific  Railroad. 

Size  of  project  team:  220 
people,  including  offshore 
developers 

Size  of  IT  staff:  Just  over  1,400 
people,  including  400  in  tele¬ 
communications  operations 

Project  investment:  Union 
Pacific  plans  to  invest  roughly 
$200  million  in  a  new  trans¬ 
portation  distribution  network 
that’s  being  completed  in 
stages  through  2013. 

Project  payback:  By  automat¬ 
ing  customer  billing  processes. 
Union  Pacific  has  dramatically 
reduced  the  amount  of  manual 
edits  needed  to  process  cus¬ 
tomer  bills  and  is  saving  mil¬ 
lions  of  dollars  in  labor  costs. 


M  [Staffers  and  cus¬ 
tomers]  expect 
to  be  able  to  go  to  the 
Web  to  find  what  they’re 

look¬ 
ing  for 
without 
having  to 
use  some 
special 
code  to 
get  there. 

LINDA  BRANDL,  VICE  PRESIDENT. 
CUSTOMER  SERVICE.  UNION  PACIFIC  CORP. 


roads  to  provide  more  services  that  are 
easier  to  access. 

Union  Pacific  is  working  to  address 
those  types  of  requirements  in  Net- 
Control,  which  is  in  the  third  year  of  a 
multiyear  design  effort  and  about  30% 
complete.  For  instance,  more  than  99% 
of  the  railroad’s  customer  orders  are 
generated  electronically  over  the  Web 
and  through  EDI  feeds,  says  Linda 
Brandi,  vice  president  in  charge  of 
Union  Pacific’s  400-person  national 
customer  service  center.  When  freight 
customers  sent  electronic  orders 
through  the  mainframe  system,  in¬ 
formation  in  the  orders  didn’t  always 
match  up  with  data  in  Union  Pacific’s 
records  —  for  example,  there  might 
have  been  differences  between  loca¬ 
tion  codes,  says  Tennison.  When  that 
occurred,  customer  service  representa¬ 
tives  had  to  manually  edit  the  orders. 

Union  Pacific  automated  many  of 
those  processes  in  the  new  platform 
by  applying  a  rules-based  system  un¬ 
der  an  electronic  shipment  services 
application  that  was  implemented  in 
August  2004.  The  system  helps  catch 
any  disparities  and  “fix  them  for  good,” 
says  Brandi.  That  application  has  al¬ 
most  completely  eliminated  the  need 
for  customer  service  agents  to  make 
corrections  on  orders  and  bills  of  lad¬ 
ing,  says  Malley,  who  is  the  NetControl 
project  leader. 

PRESSURE  TO  SAVE 

Those  improvements  alone  have  saved 
the  company  several  million  dollars 
annually  in  labor  costs,  says  Tennison. 
The  system  has  helped  Union  Pacific 
reduce  its  electronic  billing  failure  rate 
by  59%  since  it  was  installed. 

It  has  also  enabled  Union  Pacific’s 
customer  service  department  to  work 
more  efficiently,  since  it  no  longer  has 
to  delay  customer  orders  while  manual 
corrections  are  being  made,  says  Brandi. 

That  kind  of  automation  is  critical  for 
transportation  companies  like  Union 
Pacific,  because  freight  traffic  sagged 
during  the  recession.  In  its  July  23  quar¬ 
terly  financial  report,  Union  Pacific 
stated  that  its  year-over-year  freight 
revenue  had  declined  28%  during  the 
quarter  that  ended  June  30. 

Such  pressures  are  driving  transpor¬ 
tation  companies  to  push  IT-business 
projects  aimed  at  generating  “signifi- 
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cant”  ROI  through  efficiencies  and  cost 
controls,  says  Jack  W.  Plunkett,  CEO 
of  Plunkett  Research  Ltd.  in  Houston. 
Those  types  of  projects  include  the  de¬ 
ployment  of  Web-based  systems  to  help 
transportation  carriers  communicate 
more  effectively  with  customers  “while 
cutting  down  on  the  need  for  human 
operators,”  Plunkett  adds. 

Union  Pacific  didn’t  conduct  an  ROI 
analysis  on  NetControl,  because  the 
project  was  viewed  as  a  risk 
mitigation  strategy  to  replace 
a  40-year-old  system  that  has 
become  difficult  to  maintain 
but  is  nonetheless  core  to 
the  company’s  business,  says 
Tennison.  Still,  he  says  com¬ 
pany  executives  have  identi¬ 
fied  cost  savings  generated 
by  NetControl. 

Tennison  says  Union 
Pacific  considered  other  op¬ 
tions  besides  building  a  com¬ 
pletely  new  system,  includ¬ 
ing  the  possibility  of  using 
on-demand  cloud-based  services,  but 
they  didn’t  meet  the  company’s  needs. 
“Although  we  do  see  huge  swings  in 
capacity,  we  don’t  in  volume  changes. 
We  didn’t  see  the  economics,  and  we 
don’t  have  the  wide  swings  in  compute 
requirements”  to  justify  a  shift  to  on- 
demand  computing  services,  he  says. 

The  NetControl  project  also  gives 
Union  Pacific  a  chance  to  make  its 
transportation  services  better  for  its 
customers.  For  instance,  whereas  the 


Open-Source 

Payload 

When  CIO  Lynden  Tennison  and  other  members 
of  the  Union  Pacific  IT  team  began  exploring 
technical  platforms  for  hosting  the  NetControl 
system,  they  identified  a  few  must-haves:  The 
system  would  have  to  be  long-lasting,  able  to 
scale  effectively  and  able  to  support  a  “five- 
nines”  (99.999%  uptime)  environment. 

“We  designed  an  engineering  model  of  a  loose¬ 
ly  coupled  server  environment,  much  like  you’d 
find  at  a  Google  but  not  quite  as  sophisticated,” 
says  Tennison  of  the  initial  design  efforts,  which 
began  in  early  2003. 

The  team  spent  about  two  years  running  test 
evaluations  and  mock-up  models.  “Once  we  un- 


older  system  offered  freight  customers 
the  ability  to  track  and  trace  their  or¬ 
ders,  the  new  SOA-based  platform  will 
enable  customers  to  see  their  actual 
itineraries.  That  will  be  made  possible 
by  more  tightly  integrated  Internet  ca¬ 
pabilities  and  new  applications  that  tie 
in  more  directly  to  customers’  business 
processes,  says  Brandi.  She  notes  that 
the  220-person  NetControl  project  team 
recently  began  planning  the  develop¬ 
ment  of  that  functionality. 

Because  the  NetControl 
system  is  being  phased  in 
over  time,  Union  Pacific’s 
freight  customers  already 
have  increased  visibility  into 
their  orders.  For  example, 
customers  no  longer  have  to 
call  or  fax  in  their  orders  a 
few  days  ahead  of  time  with 
the  number  of  freight  cars 
they’ll  need  for  a  single  ship¬ 
ment  or  set  of  shipments, 
says  Brandi.  In  2005,  the 
NetControl  project  team 
developed  an  application  called  Total 
Car  Management  that  made  it  pos¬ 
sible  for  customers  to  place  orders  via 
the  Web  and  use  their  browsers  to  see 
when  freight  cars  have  been  applied  to 
their  orders,  says  Brandi.  The  applica¬ 
tion  has  helped  Union  Pacific  reduce 
the  amount  of  manual  car  orders  by 
75%  since  it  was  installed,  according  to 
company  officials. 

Union  Pacific’s  shift  away  from  the 
mainframe  system’s  green-screen 

derstood  enough  about  the  technical  framework, 
we  started  in  earnest  on  the  redesign  of  the  core 
business  in  mid-  to  late  2006,"  Tennison  adds. 

Project  team  members  opted  for  a  distributed 
network  because  they  wanted  a  system  that  could 
efficiently  handle  compute-intensive 
applications,  such  as  those  that  build 
optimization  models  for  locomotives 
and  railcars,  says  Tennison.  “We 
wanted  to  be  able  to  throw  a  lot  of 
horsepower  at  these  problems  and 
not  be  constrained  by  a  big,  monolithic 
engine,”  he  says.  The  team  ultimately 
decided  to  run  the  system  on  Linux. 

For  Martin  Malley  and  members  of 
the  220-person  NetControl  project 
team,  one  of  the  biggest  challenges 
has  been  determining  which  features 
of  the  old  system  have  to  be  preserved 


interface  has  also  benefited  many  of 
the  younger  employees.  For  instance, 
Brandi  says  it  takes  10  weeks  to  train 
a  customer  service  rep  on  the  old  sys¬ 
tem,  but  it’s  expected  to  take  just  six 
weeks  once  the  new  system,  which 
is  much  more  intuitive,  is  full  imple¬ 
mented. 

Younger  people  “have  grown  up  in 
a  texting  environment  with  MySpace 
and  Facebook,”  says  Brandi,  so  many 
of  the  company’s  younger  staffers  and 
customers  “expect  to  be  able  to  go  to 
the  Web  to  find  what  they’re  looking 
for  without  having  to  use  some  special 
code  to  get  there”  as  they  would  with 
the  green-screen  system. 

Still,  the  NetControl  project  team 
had  to  make  sure  that  the  new  GUI 
wouldn’t  be  a  complete  shock  for  those 
employees  who  had  become  accus¬ 
tomed  to  the  look  and  feel  of  the  old 
system.  To  strike  a  balance,  developers 
have  created  a  set  of  browser-based 
style  sheets  that  allow  end  users  to 
choose  their  GUI  preferences,  says 
Tennison. 

It  helps  that  the  project  team  has  in¬ 
troduced  functionality  in  “baby  steps,” 
says  Tennison.  From  a  cultural  perspec¬ 
tive,  he  says,  “that  made  it  a  lot  easier, 
maybe  because  we  didn’t  go  too  fast.” 
Instead,  the  company  has  laid  new  track 
for  NetControl  while  the  mainframe  is 
eased  into  the  boneyard.  ■ 

Hoffman  is  a  freelance  writer  in  New 
York.  Contact  him  at  tom.hoffman24@ 
gmail.com. 

-  and  do  that  without  the  aid  of  documentation  on 
how  various  business  processes  in  that  system 
have  evolved,  says  Malley. 

To  do  that,  the  team  is  applying  an  agile  model 
where  applications  are  designed  three  to  six 
months  ahead  of  the  software  de¬ 
velopment  schedule,  says  Malley. 
Application  delivery  teams  work  in 
one-month  shifts,  and  new  releases 
are  generated  each  quarter. 

That  approach  tends  to  work  well 
for  service-oriented  architecture 
initiatives,  says  Randy  Heffner,  an 
analyst  at  Forrester  Research  Inc. 
With  an  SOA-type  framework,  says 
Heffner,  “there  are  opportunities  to 
automate  things  and  rethink  how 
certain  processes  work.” 

-  THOMAS  HOFFMAN 


Project  leader 
MARTf  1  MALLEY 
says  NetControl 
makes  it  easier  to 
serve  customers. 


NetControl  needs 
“a  lot  of  horse¬ 
power,”  says  CIO 
LYNDEN  TENNISON. 
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■  SECURITY  MANAGER’S  JOURNAL  I  MATHIAS  THURMAN 


Trouble 

Ticket 


Not  All  Patches 
Are  Created  Equal 

Not  all  patches  are  for  operating  systems, 

and  not  all  deserve  the  same  priority. 


Normally,  when 
we  think  of  patch 
management,  we 
think  of  Microsoft 
security  updates  and  ser¬ 
vice  packs  or  Solaris  patch 
clusters.  But  what  about 
those  other  patches?  You 
know,  the  patches  for  IBM’s 
WebLogic,  Sun’s  Java  and 
RIM’s  BlackBerry  Desktop. 
Or  the  ones  for  Adobe, 

SAP,  PeopleSoft,  Oracle 
and  other  applications  that 
aren’t  covered  by  standard 
operating  system  patches. 

The  other  day,  at  my 
company’s  daily  opera¬ 
tional  status  meeting,  the 
operations  manager  pre¬ 
sented  a  list  of  outstanding 
security  tickets.  There 
were  over  80  related  to 
pending  application  patch¬ 
es.  There  are  various  rea¬ 
sons  for  this  backlog.  One 
is  the  lack  of  a  develop¬ 
ment  environment  to  test 
patches  before  deploying 
them  to  production.  An¬ 
other  is  that  a  patch  might 
revert  configurations  to 
the  default  settings.  In 
other  cases,  we  have  lost 
tribal  knowledge  about  an 
application  because  the 
original  administrator  was 
laid  off  and  left  without 


sharing  what  he  knew. 

I  had  to  do  something, 
but  mandating  that  all 
patches  be  installed  im¬ 
mediately  would  probably 
result  in  disaster.  I  decided 
to  spend  some  time  ana¬ 
lyzing  each  vulnerability 
and  then  prioritizing  them 
based  on  whether  there 
was  some  leeway  in  when 
a  critical  patch  could  rea¬ 
sonably  be  deployed. 

In  establishing  criteria 
for  that  prioritization,  I  first 
considered  what  the  impact 
would  be  if  a  vulnerability 
were  exploited.  Would 
a  hacker  be  able  to  gain 
remote  access  or  launch  a 
denial-of-service  attack? 

Another  consideration 
was  the  location  of  a 
vulnerable  resource.  A 
Web  server  sitting  on  the 
Internet  has  a  higher  prob¬ 
ability  of  getting  hacked 
than  one  on  our  internal 
network,  and  our  Active 

■  Mandating 
that  all  patches 
be  installed  im¬ 
mediately  would 
probably  result 
in  disaster. 


Directory  server  would 
surely  need  more  attention 
than  the  server  running 
the  HR  survey  tool.  Then 
there  was  the  question 
of  exploitability.  Would 
a  script  kiddie  be  able  to 
exploit  the  vulnerability, 
or  would  the  hack  require 
advanced  knowledge  or 
programming  skills? 

ADDING  WEIGHT 

An  important  consider¬ 
ation  is  availability.  Appli¬ 
cation  vendors  sometimes 
err  on  the  side  of  caution 
and  label  a  vulnerability  as 
“critical”  even  though  it  is 
extremely  unlikely  that  any 
code  will  ever  be  written  to 
exploit  it.  The  vulnerability 
can’t  be  ignored,  but  ques¬ 
tions  can  be  asked:  Is  ex¬ 
ploit  code  freely  available 
on  the  Internet?  Is  it  includ¬ 
ed  within  the  Metasploit 
application?  (Metasploit  is 
a  tool  for  developing  and 
executing  exploit  code 
against  target  machines 
and  other  IT  resources.)  Or 
is  the  code  only  available 
through  covert  channels? 
The  answers  to  those  ques¬ 
tions  help  determine  how 
quickly  you  should  move. 

Finally,  patching  priori- 


AT  ISSUE:  Application 
patches  haven’t  been  ap¬ 
plied  in  a  timely  manner. 

ACTION  PLAN:  Establish 
j  criteria  for  setting  pri¬ 
orities,  and  get  the  most 
!  crucial  patches  deployed 
ASAP. 

ties  can  depend  on  wheth¬ 
er  compensating  controls 
are  in  place.  For  example, 
an  exploit  that  requires 
an  end  user  to  visit  a  mal¬ 
formed  Web  page  could  be 
a  low  priority  if  you  have 
globally  deployed  a  Web 
reputation  service. 

To  help  in  establish¬ 
ing  priorities,  I  created  a 
spreadsheet  with  weighted 
averages.  For  example,  if 
exploit  code  is  available 
only  through  covert  chan¬ 
nels  but  the  vulnerable 
resource  faces  the  public 
Internet,  it  would  be  given 
more  weight  than  if  the 
vulnerable  resource  were 
in  the  DMZ,  protected  by 
an  application  proxy. 

Prioritization  gave  the 
operations  team  some  ad¬ 
ditional  time,  but  at  the 
end  of  the  day,  all  of  the 
patches  still  need  to  be  de¬ 
ployed.  Next  on  my  agenda 
is  providing  training  to  the 
Level  2  security 
analysts  so  they 
can  apply  the 
same  methodol¬ 
ogy  in  prioritiz¬ 
ing  future  appli¬ 
cation  patches, 
and  so  I  can  attend  to  more 
pressing  matters,  such  as 
endpoint  data  leak  preven¬ 
tion,  which  I’ll  discuss  in 
my  next  installment.  ■ 

This  week’s  journal  is  writ¬ 
ten  by  a  real  security  man¬ 
ager,  “Mathias  Thurman,” 
whose  name  and  employer 
have  been  disguised  for 
obvious  reasons.  Contact 
him  at  mathias_thurman@ 
y  ahoo.com. 


0JOIN  IN 

To  join  in  the  discussions 
about  security,  go  to 

■  computerwoiid.com/ 
blogs/security 
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OPINION 


Steven  J.  Vaughan-Niehols 


All  Google,  All  the 
TimeL  Everywhere 


WE  ALL  USE  GOOGLE.  Well,  maybe  not 

Bill  Gates,  but  that’s  about  it.  Now,  Google 
is  hoping  to  become  an  even  bigger  part  of 
our  everyday  lives. 


The  key  to  this  is  Google’s 
three  new  search  features: 
real-time  search,  location- 
based  service  and  aug¬ 
mented  reality. 

Think  about  it:  Google 
has  primarily  been  about 
computer-based  search. 
You  sit  at  your  PC  and  find 
what  you  want  on  the  Web. 
But  if  you  put  those  three 
new  features  together, 
where  do  they  shine  the 
best?  On  mobile  devices. 
With  Google’s  Android 
powering  phones  and 
Chrome  OS  on  netbooks,  I 
see  the  company  making  a 
preemptive  strike  to  take 
over  mobile  computing. 

Real-time  search  will 
clearly  be  useful  for  any¬ 
one  who  wants  to  know 
what’s  happening  right 
now,  but  I  couldn’t  help 
noticing  that  one  example 
Google  gave  when  it  an¬ 
nounced  the  new  function¬ 
ality  was  that  beyond  just 
helping  you  find  out  where 
you  could  get  an  H1N1  flu 
shot,  it  could  also  show 
you  how  long  the  lines 
were.  In  other  words,  it’s  a 
perfect  mobile  application. 


Many  of  the  real-time 
updates  will  be  coming 
from  social  networking 
sites.  Facebook,  MySpace, 
FriendFeed,  Jaiku,  Twit¬ 
ter  and  Identi.ca  are  all  on 
board.  But  wouldn’t  it  be 
handy  to  know  where  your 
friends  are  when  you’re 
out  on  the  town? 

Of  course,  it  helps  to 
know  where  you  are  as  well. 
That’s  where  LBS  (location- 
based  service)  comes  in. 
Today,  LBS  tends  to  rely 
on  a  mobile  device’s  GPS 
and  compass.  Higher-end 
devices  have  both,  and  oth¬ 
ers  will  have  them  soon. 
With  this  mapping  informa¬ 
tion,  your  Google-enabled 
smartphone  not  only  can 
tell  you  where  your  friend 
is,  based  on  her  real-time 
social  network  update;  it 
can  also  say  where  you  are 
in  relation  to  her. 


■  Where  do 
Google’s  new 
search  features 
shine  the  best? 

On  mobile  devices. 


Let’s  take  it  a  step  further. 
Say  you  don’t  recognize 
where  you  are.  No  big  deal; 
with  your  mobile  device’s 
camera,  Google  Goggles 
“looks”  at  your  surround¬ 
ings  and  tells  you  what’s 
what.  Oh,  look,  Google 
just  displayed  on  your 
camera’s  viewer  the  name 
of  the  Chinese  restaurant 
where  your  friend  is  as 
you  passed  the  lens  over  it. 
Welcome  to  the  world  of 
AR  (augmented  reality). 

Chances  are  you  don’t 
know  a  lot  about  LBS 
and  AR.  You’re  going  to. 
Google  has  decided  they’re 
ready  for  prime  time,  and 
it’s  putting  its  considerable 
resources  behind  them. 

Some  apps  from  other 
companies  already  make 
use  of  the  LBS/AR  combi¬ 
nation.  These  include  the 
Layar  Reality  Browser  and 
Mobilizy’s  Wikitude.  Just 
like  Google,  both  use  a 
Web  browser  metaphor  to 
present  information  to  you. 
For  example,  with  Layar, 
you  can  take  a  Beatles- 
oriented  guided  tour  of 
London’s  Abbey  Road  us¬ 


ing  your  mobile  phone. 

To  this  kind  of  function¬ 
ality,  Google  can  add  its 
real-time  social  network¬ 
ing  information.  So  if  you 
were  touring  my  home¬ 
town  of  Asheville,  N.C., 
you  could  not  only  view 
information  about  the  Bilt- 
more  house  on  Wikipedia, 
but  you  could  also  find  out 
what  your  friends  had  to 
say  about  the  place  after 
their  visit  a  week  earlier. 

Getting  the  idea?  When 
you  put  it  all  together  — 
high-speed  3G/4G/WiMax 
mobile  devices  with  LBS, 
AR  and  real-time,  per¬ 
sonal  news  —  we’re  talk¬ 
ing  about  an  entirely  new 
computer  experience. 

I  don’t  know  where  it’s 
all  going.  All  I  know  is  that 
Google’s  smart-search- 
enabled  mobile  devices 
will  change  the  way  we 
see  computing  in  ways 
unmatched  since  the  Web 
changed  everything  in  the 
early  ’90s. 

Oh,  yes,  I  also  know  that 
back  then,  Bill  Gates  didn’t 
see  the  Internet  as  being 
all  that  important.  It  took 
about  two  years  for  Micro¬ 
soft  to  realize  that  the  Web 
had  changed  everything.  If 
Microsoft  and  other  com¬ 
panies  don’t  follow  Google 
quickly,  they  may  not 
have  two  years  to  recover. 
We’re  in  for  some  interest¬ 
ing  times,  my  friends.  ■ 
Steven  J.  Vaughan-Niehols 
has  been  writing  about 
technology  and  the  business 
of  technology  since  CP/M- 
80  was  cutting-edge  and 
300bit/sec.  was  a  fast  Inter¬ 
net  connection  —  and  we 
liked  it!  He  can  be  reached 
at  sjvn@vnal.com. 
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■  Q&A 

RonHira 

The  Rochester 
Institute  of  Technol¬ 
ogy  professor  and 
author  of  Outsourcing  Amer¬ 
ica  talks  about  the  broad 
consequences  of  offshoring. 


As  a  serious  researcher  of  the 
outsourcing  phenomenon,  you 
have  taken  to  warning  that 
outsourcing  has  grave  implica¬ 
tions  for  the  well-being  of  the 
nation.  Could  you  elaborate? 
Standard  economic  theory  tells  us 
that  offshoring  could  be  good  or 
it  could  be  bad  for  the  American 
economy  and  standard  of  living.  It 
is  ambiguous  at  the  macro  level, 
but  there's  good  reason  to  believe 
that  it  will  be  bad.  When  a  country 
outsources  what  it  is  good  at,  build¬ 
ing  up  the  capabilities  of  the  country 
it  trades  with,  it  can  be  worse  off.  I 
think  that's  precisely  what’s  going 
on  right  now  with  software  and 
engineering  offshoring.  And  compa¬ 
nies  are  even  offshoring  innovation 
and  R&D,  something  that  would 
have  been  unthinkable  even  a  few 
years  ago.  By  doing  so,  America  is 
undercutting  its  technological  and 
economic  future. 

Standard  theory  also  tells  us  that 
many  American  workers  will  be  much 
worse  off  from  offshoring,  as  their 


jobs  move  overseas  and  they  face 
major  wage  competition  from  work¬ 
ers  in  low-cost  countries.  This  isn't 
going  to  hit  just  a  small  segment  of 
workers.  Princeton  economist  Alan 
Blinder  estimates  that  as  many  as  40 
million  jobs  are  newly  offshorable, 
including  nearly  all  science  and  en¬ 
gineering  jobs.  While  not  all  of  those 
jobs  will  be  lost  overseas,  those 
workers  will  face  wage  pressures. 
We’re  already  seeing  it  -  Hewlett- 
Packard  has  asked  many  of  its  EDS 
employees  to  take  50%  pay  cuts. 

There’s  no  disputing  this  negative 
effect  on  American  workers.  Even 
the  most  pro-offshoring  report, 
written  by  McKinsey  Global  Insti¬ 
tute’s  Diana  Farrell,  which  asserted 
that  the  U.S.  will  be  better  off  with 
offshoring,  concedes  that  American 
workers  will  experience  major 
losses  in  wages  and  jobs. 

Offshoring  is  a  major  structural 
shift  in  the  way  the  economy  works. 
Alan  Blinder  has  called  it  a  shift 
equivalent  to  the  industrial  revolu¬ 
tion.  Ponder  that! 


Of  course,  the  well-being  of 
the  nation  is  not  something 
that  business  leaders  are 
expected  to  take  into  ac¬ 
count.  They  answer  to  their 
shareholders.  What  needs 
to  change  so  that  companies 
reject  outsourcing  options 
that  make  economic  sense 
for  them?  This  is  a  very  impor¬ 
tant  observation,  one  that  is  lost 
on  most  politicians.  When  John 
Kerry  was  running  for  president, 
he  called  the  CEOs  who  outsource 
“Benedict  Arnolds.”  This  was  silly, 
because  there's  no  point  in  trying 
to  appeal  to  their  patriotism.  These 
are  global  companies,  and  the 
CEOs  are  not  compensated  by  how 
many  American  workers  they  em¬ 
ploy  or  even  how  the  U.S.  economy 
performs.  They  can  and  do  lobby 
for  public  policies  that  benefit  their 
companies,  even  if  it  is  bad  for  the 
economy  and  America.  They  act 
rationally  in  their  self-interest,  and 
there’s  nothing  wrong  with  that. 
The  problem,  though,  is  that  there 
is  no  interest  group  representing 
the  American  national  interest  or 
American  workers  to  counterbal¬ 
ance  the  business  lobbyists.  Think 
about  it.  Who  is  representing  your 
readers  in  Washington? 

The  solution  is  for  the  government 
to  approach  this  with  both  carrots 
and  sticks.  But  the  first  step  is  for 
the  government  to  take  this  issue 


seriously.  Unfortunately,  President 
Obama  named  Farrell,  who  is  the 
leading  offshoring  evangelist,  to  the 
No.  2  post  in  his  National  Economic 
Council.  Farrell  has  done  more  than 
anyone  else  to  spread  the  gospel  of 
offshoring,  so  it’s  hard  to  believe  that 
Obama  takes  his  own  rhetoric  about 
Buffalo  vs.  Bangalore  seriously. 

So,  there’s  no  movement 
toward  changing  the  incen¬ 
tives  through  government 
action?  Unfortunately,  not  yet. 

The  Obama  administration  has 
been  worse  than  disappointing  on 
the  issue  of  offshoring,  practicing  a 
bait-and-switch  approach.  By  using 
the  issue  for  political  advantage, 
Obama  has  given  a  false  sense  to 
the  public  that  he  is  taking  action 
on  offshoring.  His  only  policy  ac¬ 
tion  to  date  is  to  try  to  close  the  tax 
loophole  that  encourages  offshor¬ 
ing.  It  is  highly  unlikely  he  will  have 
the  political  support  to  close  the 
loophole,  even  though  it  should  be 
a  no-brainer. 

No  other  country  in  the  world 
gives  tax  breaks  to  companies 
that  offshore  work!  Why  do  we 
do  it?  It’s  a  prime  example  of  the 
strength  of  the  business  lobby.  And 
of  course,  the  Obama  administra¬ 
tion  has  done  nothing  to  close  the 
loopholes  in  the  H-1B  and  L-1  visa 
programs  that  spur  offshoring. 

-  JAMIE  ECKLE 


U.S.  PRIVATE-SECTOR  JOBS 
ON  THE  DECLINE 

If  job  creation  had  continued  in  this  decade  at  the  rate  experienced 
in  the  1990s,  there  would  today  be  an  additional  21  million  private- 
sector  jobs  in  the  U.S.  Much  of  that  shortfall  can  be  attributed 
to  offshoring,  says  RIT  professor  Ron  Hira. 
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DATA  SOURCE:  U.S.  BUREAU  OF  LABOR  STATISTICS  / 
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MARKETPLACE 


Your  message  works  in  the 
Marketplace  section! 


El 

To  advertise,  call  or  email 
Enku  Gubaie  at: 

508.766.5487 

egubaie@idgenterprise.com 


Instantly  Search  Terabytes  of  Text 


♦  25+  full-text  and 
fielded  data  search 
options  (with 
Unicode  support  for 
hundreds  of 
international 
languages) 

♦  Built-in  file  parsers  / 
converters  highlight 
hits  in  popular  file 
types 

♦  Spider  supports  static 
and  dynamic  web 
data;  highlights  hits 
with  links,  formatting 
and  Images  intact 


cA. hit  ♦  API  suPP°rts  -NET' 
C++,  Java,  SQL,  etc. 
.NET  Spider  API 


The  Smart  Choice  for  Text  Retrieval®  since  1991 


'Bottom  line:  dtSearch  manages  a  terabyte  of  text  in  a 
single  index  and  returns  results  in  less  than  a  second" 
—  InfoWorld 

dtSearch  "covers  all  data  sources  ...  powerful  Web- 
based  engines"  —  eWEEK 

'Lightning  fast ...  performance  was  unmatched  by  any 
other  product"  —  Redmond  Magazine 

See  www.dtsearch.com  for  hundreds  more  reviews, 
and  hundreds  of  developer  case  studies 


,  _  _ 

Fully-Functional  Evaluations 


_  _  _  __  _____  ■_  - 

1-800-IT-FINDS  •  www.dtsearch.com 


#  m  *  #  m 

__ /^MARKETPLACE 

Contact  Enku  for 
more  information! 
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IT  careers 


Operations  Research  Analyst. 
Create  formal  mathematical  defi¬ 
nition  of  fraud  events  based  on 
their  descriptions  provided. 
Gather  definitions,  descriptions 
and  other  information  related  to 
definition  of  fraud  events  from 
multiple  sources,  analyze  them 
and  create  complete  formal 
model.  Create  high  quality,  reli¬ 
able  algorithms  to  find  fraud 
operations  within  reasonable 
amount  of  time.  Write  a  computer 
program  which  will  analyze  daily 
flow  of  financial  operations  on 
market  (orders,  execution, 
trades,  etc.)  to  find  fraud. 
Candidate  must  have:  Excellent 
knowledge  in  mathematics  and 
search  algorithms  (Genetic 
Algorithms,  Graph  Theory, 
Constraint  Satisfaction).  Deep 
knowledge  in  financial  economy. 
Proven  experience  in  cash  equi¬ 
ties  or/and  fixed  income. 
Extensive  experience  in  pro¬ 
gramming  languages  and  tech¬ 
nologies:  Core  Java,  Python, 
multithreading,  networking,  NIO, 
JDBC,  J2EE,  JPA,  Spring, 
Hibernate,  JAX-WS,  XML,  XPath. 
Experience  in  software  design: 
OOA/OOD,  UML,  flowchart,  ER 
model,  GOF  design  patterns. 
Experience  working  in  financial 
infrastructure:  FIX  protocol, 

QuickFIX/J.  Deep  knowledge  in 
Oracle,  data  warehouse,  SAS, 
MATHLAB,  PL/SQL,  SQL,  stored 
procedures,  performance  tuning. 
Experience  with  Sun  OS,  Linux, 
writing  shell  scripts.  Experience 
with  reporting  software,  such  as 
Crystal  Report,  Cognos.  Must 
have  a  Master  of  Science  degree 
or  U.S.  equivalent  in  Computer 
Information  Systems  or  related 
field  plus  three  years  experience 
as  an  Operations  Research 
Analyst  or  five  years  experience 
as  a  Senior  Java  Developer  (in 
Financial  Industry).  Send 
resume  to  Human  Resources, 
Insycom,  Inc.,  85  River  Street, 
Suite  4B,  Waltham,  MA  02453. 


"Project  Technical  Leader 
(Bismarck,  ND)  to  lead  software 
development  team  for  a  large  IT 
development  project.  Require 
Computer  Science  Master’s 
degree  or  equivalent  with  3-yr 
experience  with  the  job  offered  or 
Computer  Science  Bachelor's 
degree  or  equivalent  with  5-yr 
experience  with  the  job  offered, 
plus  skills  in  Object  Oriented,  C#, 
MS.Net,  ASP.Net,  MS  WCF. 
Send  application  &  salary 
requirement  to  Bhasin,  Sagitec 
Solutions,  Inc.  2233  N.  Hamline 
Ave.,  #420,  Roseville,  MN 
55113.” 


Computer  Professionals 

(Plainsboro)  NJ:  Jr.  Lvl  positions- 
Programmer  Analysts,  S/w 
Engineers,  Systems  Analysts: 
Develop,  create,  modify  general 
comp,  applications  s/ware  /utility 
programs.  Analyze  user  needs  & 
develop  s/w  solutions.  Sr.  Lvl 
position-Sr.  Software  Engineers, 
Sr.  Programmer  Analyst,  IT 
Manager:  Plan,  direct,  coordinate 
activities  in  such  fields  as  elec¬ 
tronic  data  processing,  infor¬ 
mation  systems,  systems  analy¬ 
sis,  &  computer  programming. 
Apply  in  duplicate  to  Millennium 
Info  Tech,  Inc,  101  Morgan  Lane, 
Ste  #  204,  Plainsboro,  NJ  08536. 


CEO,  IT  Consulting 
Global  co  seeks  exec  in 
Pittsburgh,  PA  to  oversee 
U.S. based  hub  operat’g  in  mult 
verticals/industries,  incl.  retail 
svcs  BPO,  FPO,  KPO  &  prod 
portfolio.  Direct  mult-tier 
product'n  &  mktg  in  transnat’l 
mkts  (primarily  Asia).  Do  full- 
cycle  IPO,  take  co  public  in  US 
(NASDAQ)  &  mge  post-IPO 
transformat’n.  Create  plan  to 
move  beyond  core  solutn/prod 
portfolio  &  into  adjacent  &  com¬ 
plementary  mkts  (e.g.,  ISV  R&D, 
offshore  suppt  &  infrastructure 
mgmt).  Communic  strategic 
vision  w/360  deg  approach  to 
internal/external  audiences  & 
stakeholders.  Direct  P&L  own¬ 
ership/cost  mgmt.  Estab  Centre 
of  Excellent  for  Various  technol 
incl  ERP,  SAO  &  Integrat’n. 
Estab  &  expand  strategy 
Alliances  w/various  IT  Prod  ven¬ 
dors  (eg,  MS  Gold,  IBM)  for 
global  relationships.  Have  dem¬ 
onstrated  track-rcrd  of  success 
mng'g  growth  of  multi-tier 
onshore,  nearshore,  OS  teams, 
techl/programm’g  operat’ns  & 
sales  of  post-IPO  transnat'l  firms 
incl  exec  team-bldg,  HR.  Dvlp 
comprehensive,  centralized 
front-line  sales  of  IT  srvces / 
solutns  &  IT  prods.  Lead  the  sw 
dvlpmt/eng  team  as  mentor  to 
deliver  innovative  sw  prods  to 
mkt.  Seek  versatile  hands-on 
operator/thought  leader  w/3  yrs 
operat'g  exp.  in  posit’n  off  d  or  as 
syst  Lead/  IT  proj't  mgr/country 
head  &  SBU  head.  Must’ve  a 
Bach's  deg  (or  frgn  equiv)  in 
Technol  or  rel  fid.  Freq  int’l  travel 
will  be  rqd.  Send  res  to  Tony 
Kernan,  Nityo  Infotech,  2652 
Hidden  Valley  Rd,  Ste  102, 
Pittsburgh,  PA  15241;  NIT5, 
EOE 


Chevron  seeks  Information 
Technologist  in  San  Ramon, 
CA.  MS  in  Computer  Science  + 
2  yrs  exp  in  job  offered  or  as 
Comp.  Software  Eng.  Reqd 
skills:  C  &  C++;  Qt  Graphical 
interface  libraries;  Visual  Studio; 
Open  GL;  GNUPIot;  Java; 
HTML;  Javascript;  XML  &  SQL 
webscripting;  Oracle;  Perl  & 
Python;  CVS  Code  repositories; 
Redhat  Linux;  MS  Windows 
developer  tools;  Autodesk  maya 
graphics  applications  &  image 
processing  software  program¬ 
ming  using  Magick  ++  & 
Cognex  vision  tools;  Mu  &  GTO 
software.  Mail  resume: 
Chevron,  1500  Louisiana  St., 
Houston,  TX  77002  attn  V. 
Gomez  Ref  job  139. 


Software  engineer  to  design, 
develop  and  test  computer  pro¬ 
grams  for  business  applications; 
analyze  software  requirements  to 
determine  feasibility  of  design; 
direct  software  system  testing 
procedures.  Requirements: 
Associate’s  Degree,  educational 
or  functional  equivalent,  foreign 
equivalent  in  Engineering, 
Computer  Science,  Management 
Information  Systems,  or  related 
field.  Working  Conditions:  8:00 
A.M.  to  5:00  P.M.,  40  hours/ 
week,  involves  extensive  travel 
and  frequent  relocation.  Apply: 
Computer  Enterprises,  Inc.,  1910 
Cochran  Rd,  Manor  Oak  2,  Suite 
230,  Pittsburgh,  PA  15220,  Attn: 
Anthony  Tedesco,  Job  No 
082609. 


KPK  Technologies  seeks  pro¬ 
grammer/system  analyst,  DBA, 
software  engineer  to  customize 
applications  using  various  tools 
and  skills  (Java,  Oracle,  VB,  etc) 
per  project  requirements.  Travel 
required  as  job  site  various. 
Please  contact  lnfo@kpktech.com. 

Comp  Consults  seeks  software 
engineer,  Analysts,  DBA,  to 
design  &  develop  programs  using 
Oracle,  Unix,  C/C++,  VB,  Java, 
J2EE,  EJB.  Require  MS  or  BS 
with  1-5yr  IT  exp.  Jobsite  vari¬ 
ous.  Please  send  resumes  to 
immg@compconsults.com. 


Design  Engineer.  Use  Catia  V5, 
FEA,  Kinematics,  DMU,  3D  mod¬ 
eling  and  2D  drafting,  Geometric 
Dimensioning  &  Tolerancing 
(GD&T)  to  drawings  and  perform 
layout/tolerance  stack  up  analy¬ 
sis.  Send  resume:  LG  Fox,  Inc, 
1692  Jaggie  Fox  Way,  Lexington, 
KY  40578. 

Techpillars,  Inc.  seeks  clinical 
system  analyst  to  perform  clinical 
database  design  and  analysis. 
Design  and  implement  SAP 
Netweaver,  SCM,  SRM  and 
CRM.  Job  sites  various.  Send 
resume:  2223  Highstone  Rd, 
Cary,  NC  27519.  _ 


IT  Professionals 

Hyland  Software,  Inc.  seeks 
qualified  Software  Engineer 
(SE),  Assoc.  Software 
Developer  (ASD),  Software 
Developer,  multiple  positions, 
(SD)  and  International  Market 
Research  Analyst  (IMRA)  to 
work  in  Cleveland,  OH.  Please 
apply  online  at  http:// 
jobs.onbase.com  Must  ref¬ 
erence  Job  Code  where  indi¬ 
cated  to  be  considered  or  send 
resume  to  HR  Department, 
28500  Clemens  Road, 
Westlake,  Ohio  44145.  Must  ref¬ 
erence  job  code  IM1209  in 
cover  letter.  EOE. 


Mach  B  Technologies  seeks 
Computer  Programmer  to  ana¬ 
lyze,  design,  implement,  test, 
debug  and  deploy  Microsoft.NET 
based  software  applications 
using  Winforms,  ASP.NET  and 
SQL  Server,  including  Reporting 
Services.  Must  have  at  least  MS. 
Travel  may  be  req.  Apply  at 
Mach  B  Technologies,  1200  W. 
Walnut  Hill  Lane,  Ste.  3200, 
Irving,  Texas  75038. 


Computer  Professionals  needed 
(Iselin)  NJ  based  IT  firm,  Jr.  Lvl 
positions-Programmer  Analysts, 
S/w  Engineers,  Systems 
Analysts,  to  develop,  create,  and 
modify  general  comp,  appli¬ 
cations  s/ware  or  specialized  util¬ 
ity  programs.  Analyze  user  needs 
and  develop  software  solutions. 
Sr.  Lvl  position-Sr.  Software 
Engineers,  Sr.  Programmer 
Analyst  to  plan,  direct,  or  coor¬ 
dinate  activities  in  such  fields  as 
electronic  data  processing,  infor¬ 
mation  systems,  systems  analy¬ 
sis,  and  computer  programming. 
Apply  w/2  copies  of  resume  to 
Timesquare  Technologies,  Inc., 
200  Middlesex  Essex  Tpk,  Suite 
104,  Iselin  NJ  08830. _ 


Computer  Professionals  needed 
(Magnolia)  NJ  based  IT  firm:  Jr. 
Lvl  positions-  Programmer 
Analysts,  S/w  Engineers, 
Systems  Analysts,  to  develop, 
create,  and  modify  general  comp, 
applications  s/ware  or  special¬ 
ized  utility  programs.  Analyze 
user  needs  and  develop  software 
solutions.  Sr.  Lvl  positions-  Sr. 
Software  Engineers,  Sr. 
Programmer  Analyst  to  plan, 
direct,  or  coordinate  activities  in 
such  fields  as  electronic  data 
processing,  information  systems, 
systems  analysis,  and  computer 
programming.  Apply  w/2  copies 
of  resume  to  RV  Information 
Technology,  Inc.,  401  White 
Horse  Pike  South,  Suite  #  201 
Magnolia,  NJ  08049. 


ShellSoft  seeks  IT  professionals 
(DBA,  system  analysts,  software 
engineers),  project  engineers 
using  Oracle,  SAP,  SQL,  Java,  Cl 
C++,  etc.  Require  MS/BS  with 
experience.  Some  positions 
require  travel.  Please  send 
resume  tojobs@shellsoftinc.com. 
No  calls. 

IT  professionals  (programmer/ 
system  analyst,  software  engi¬ 
neer,  DBA)  wanted  by 
Zeninfotech  to  design  and  cus¬ 
tomize  applications  using  various 
skills  such  as  Oracle,  Java,  C/C+ 
+.  Travel  required.  Minimum  MS 
or  BS+1-5yr  IT  exp.  Contact 
hr@zeninfotech.com. 


Didn’t  find  the 
IT  career 
that  you  were 
looking  for? 


Check  back  with  us  weekly 
for  fresh  listings  placed 
by  top  companies 
looking  for  skilled 
professionals  like  youl 
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placing  legal  or 
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Shark  lank 

TRUE  TALES  OF  IT  LIFE  AS  TOLD  TO  SHARKY 


Oops! 

In  the  big  open-plan  office 
where  this  IT  pilot  fish  works, 
the  last  employee  to  leave 
is  supposed  to  turn  out  the 
lights.  “One  day,  the  last 
person  in  the  office  couldn’t 
find  the  light  switch  but  saw 
a  big  handle  marked  ‘power,’ 
so  she  decided  to  use  that,” 
fish  says.  “Well,  it  did  turn 
the  lights  off.”  Next  morning, 
everyone  shows  up  for  work, 
but  no  one  can  get  in  -  the 
electric  lock  on  the  front 
door  isn’t  working.  Someone 
phones  the  manager  who’s 
responsible  for  the  bypass 
keys,  who  tells  the  employees 
to  smash  the  door  in.  But  that 
idea  doesn’t  sit  well  with  fish’s 
team,  so  they  come  up  with 
an  approach  that  involves 
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ropes,  ladders  and  gutters  - 
but  they  manage  to  get  into 
the  office  and  restore  power 
without  causing  any  dam¬ 
age.  “It  certainly  improved 
teamwork,”  says  fish.  “Later, 
we  found  out  the  only  bypass 
key  was  in  a  locked  cupboard 
inside  the  office.  The  key  was 
moved  to  another  office  about 
a  quarter-mile  away  in  case 
we  lost  power  again.” 

Virtually  Useless 

This  pilot  fish  applies  some 
updates  to  a  pair  of  virtualized 
Windows  2003  servers,  then 
finds  one  of  them  running 
fine  the  next  morning  -  but 
the  other  one  unresponsive. 
“It  happened  again  a  couple 
days  after  that,”  says  fish. 
“Thinking  the  updates  were 
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the  culprit,  I  uninstalled  them, 
and  all  was  fine  for  a  week  or 
so.  Then  it  went  unresponsive 
almost  every  morning.”  After 
two  weeks  of  logging  into  the 
virtual  console  each  day  to 
turn  the  virtual  machine  off 
and  on  again,  fish  is  ready 
to  scrap  it  and  re-create  the 
server.  But  she  finally  spots  a 
feature  of  the  virtual  console 
she  hadn’t  found  before:  an 
event  log.  And  according  to 
the  log,  each  morning  that 
the  virtual  machine  has  been 
unresponsive,  the  machine 
has  entered  a  sleep  state  - 
presumably  to  save  power. 

“It  was  to  hibernate  after  a 
period  of  inactivity,”  sighs 
fish.  “We  changed  the  setting 
back  to  ‘never.’  We’re  still  not 
exactly  sure  how  it  switched 
to  begin  with.” 

What  Could  Be  Better? 

Pilot  fish  at  this  government 
lab  is  called  in  because  some 
users  just  aren’t  following  the 
rules.  “I  was  asked  to  help 
investigate  the  root  cause 
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for  a  continuing  failure,” 
fish  says.  “Remotely  located 
team  members  were  not 
successfully  complying  with 
the  requirements  of  what 
I  personally  found  to  be  a 
rather  contorted  procedure. 
Interviews  with  headquarters  ! 
staff  indicated  a  conviction 
that  all  failures  were  due  en¬ 
tirely  to  the  negligence  of  the 
remote  staff  to  simply  adhere 
to  a  procedure  of  impeccable 
clarity.  The  basis  for  their 
overwhelming  confidence  in 
the  quality  of  the  procedure: 
‘Because  we  wrote  it.’  ” 

■  Write  to  Sharky  with  your 
true  tale  of  IT  life:  sharky  @ 
computerworld.com.  You’ll  get 
a  stylish  Shark  shirt  if  I  use  it. 

©  NEED  TO  VENT  YOUR  SPLEEN? 

Toss  some  chum  into  the 

roiling  waters  of  Shark  Bait 

It's  therapeutic! 

sharkbait.computerworld.com  ^ 

O  CHECK  OUT  Sharky  blog,  browse  the 
.  Sharkives  and  sign  up  for  Shark  Tank  home  . 

deliveryatcomputerworld.com/sharky. 
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■  OPINION 

Paul  Glen 

IT  Relief  Will  Lag 
Economic  Recovery 

HETHER  OR  NOT  an  economic  recovery 
has  begun,  I  suspect  that  this  will  be  another 
tough  year  for  those  of  us  in  IT.  Take  a  deep 
breath  and  get  ready  for  it.  I’m  not  trying  to 
quash  the  small  signs  of  budding  optimism,  but  I  can’t  help 


feeling  that  excessive  con¬ 
fidence  may  threaten  us 
personally  and  collective¬ 
ly.  I  think  a  bit  of  cautious 
realism  is  called  for. 

In  my  experience,  IT 
budgets  don’t  begin  to  rise 
until  at  least  a  year  after  an 
economic  recovery  begins 
in  earnest.  This  seems  to 
be  due  to  both  emotional 
and  logistical  issues.  Logis- 
tically,  budgeting  changes 
take  time.  Typically,  the 
larger  the  organization, 
the  slower  the  budgeting 
wheels  grind.  Nimble  is  not 
a  word  that  comes  to  mind 
when  thinking  about  fi¬ 
nancial  controls.  But  this  is 
more  than  just  a  mechani¬ 
cal  problem. 

Emotionally,  business 
leaders  tend  to  have  mood 
swings  like  everyone  else. 
They  become  excessively 
optimistic  and  pessimistic, 
swinging  wildly  from  one 
to  the  other.  During  the 
optimistic  periods,  they 
overspend  on  (excuse  me, 
invest  in)  IT.  During  the 
pessimistic  ones,  they 


starve  every  operational 
area  until  it  barely  func¬ 
tions.  It’s  easy  to  remind 
executives  that  one  can’t 
scrimp  a  business  into 
profitability,  but  no  one 
seems  to  pay  much  atten¬ 
tion.  When  bonuses  are 
based  on  quarterly  num¬ 
bers,  the  urge  to  cut  ex¬ 
penses  is  tough  to  resist. 

So,  despite  the  fact  that 
many  companies  are  now 
reporting  profits,  it  seems  to 
me  that  we’re  in  for  at  least 
another  year  of  tough  times. 

For  those  who  lost  their 
jobs,  it  could  be  another 
slow  year  for  trying  to 
find  work.  For  those  just 
entering  the  workforce 
from  school,  it  could  be 

■  Despite  the 
fact  that  many 
companies  are  now 
reporting  profits, 
it  seems  to  me 
that  we’re  in  for  at 
least  another  year 
of  tough  times. 


especially  difficult,  as  risk- 
averse  managers  bring  in 
only  people  with  specific 
experience  and  expertise. 
Trying  to  figure  out  what 
training  to  get  or  skills 
to  acquire  will  be  hard. 

It’s  going  to  be  difficult  to 
stand  out.  Also,  despite  the 
fact  that  a  lot  of  talented 
people  have  been  unem¬ 
ployed  for  long  periods 
of  time,  I  expect  that  hir¬ 
ing  will  be  biased  toward 
those  who  are  currently 
working.  The  unspoken, 
and  often  faulty,  assump¬ 
tion  is  that  people  with 
jobs  must  be  more  talented 
than  those  without. 

On  the  positive  side  for 
those  without  jobs,  op¬ 
portunities  for  contracting 
may  become  more  plenti¬ 
ful.  As  employers  start  to 
work  on  more  things,  they 
will  hit  the  limits  of  what 
their  remaining  staffers 
can  do.  Instead  of  hiring 
new  employees,  they  are 
likely  to  look  for  contrac¬ 
tors.  Once  an  employer 
likes  you  as  a  contractor,  it 


is  more  likely  to  hire  you 
as  an  employee. 

And  even  if  you  have  a 
job,  it  could  still  be  a  tough 
year.  As  activity  picks  up, 
employers  are  likely  to 
press  for  more  work  from 
existing  staff.  And  they’re 
likely  to  get  it.  No  one 
wants  to  lose  a  job  now.  So 
expect  some  long  hours 
and  little  reward  besides 
keeping  your  job  —  and 
maybe  a  little  appreciation. 
As  you’re  suffering  under 
the  burden,  just  remem¬ 
ber  that  one  of  the  major 
things  worse  than  having 
a  job  this  year  is  not  hav¬ 
ing  one. 

So,  what  can  we,  as  in¬ 
dividuals,  do  when  we’re 
in  the  grip  of  forces  larger 
than  ourselves?  Surrender 
to  them  and  focus  on  the 
things  we  can  control. 

Look  carefully  at  the  sys¬ 
temic  forces,  understand 
them,  and  accept  that 
you  are  largely  powerless 
against  them.  Surf  the 
waves.  If  you  try  to  stand 
fast  and  resist  or  absorb  the 
energy,  you  will  only  ex¬ 
haust  yourself.  This  is  not 
the  same  as  denial.  Hiding 
from  reality  robs  you  of  the 
opportunity  to  take  advan¬ 
tage  of  what’s  happening 
around  you. 

I  realize  that  all  this  ad¬ 
vice  is  easy  to  give  but  hard 
to  follow.  Good  luck,  and 
happy  new  year.  ■ 

Paul  Glen  is  a  consultant  who 
helps  technical  organiza¬ 
tions  improve  productivity 
through  leadership,  and  the 
author  of  the  award-winning 
book  Leading  Geeks  (Jossey- 
Bass,  2003).  You  can  contact 
him  at  info@paulglen.com. 
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Samsung  F2380  Professional 
Widescreen  LCD  Displays 


Introducing  the  innovative  new  cPVA  display  technology 
from  Samsung. 

It's  the  cool  new  way  to  deliver  eye-opening  financial  reports.  Our  affordable 
display  technology  delivers  image  quality  similar  to  monitors  nearly  twice  the 
price.  Plus,  you  get  an  incredible  3000:1  static  contrast  ratio  and  unbelievable 
viewing  angles  as  well.  So,  no  matter  what  your  numbers  say,  our  new  cPVA 
technology  will  make  them  worth  looking  at. 

See  the  cPVA  difference  for  yourself  at  samsung.com/cpva 


SAMSUNG 


©2009  Samsung  Electronics  America,  Inc.  All  rights  reserved.  Samsung  is  a  registered  trademark  of  Samsung  Electronics  Co..  Ltd. 
All  product  and  brand  names  are  trademarks  or  registered  trademarks  ot  their  respective  companies.  Screen  images  simulated. 
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